From d8aae7715f718886a94f903b01b0fd076a3e71c4 Mon Sep 17 00:00:00 2001
From: Chris Charabaruk <ChrisC@ona.org>
Date: Wed, 24 Jun 2026 10:01:37 -0400
Subject: [PATCH] fix(sarif): Use HTTPS scheme for schema URI

Resolve "untrusted URI" issues in some SARIF-consuming tools caused by
use of an HTTP URL for the schema URI in generated SARIF output.
---
 rust/crates/cpd-reporter/src/sarif.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rust/crates/cpd-reporter/src/sarif.rs b/rust/crates/cpd-reporter/src/sarif.rs
index 1a61f2e8..9caf9819 100644
--- a/rust/crates/cpd-reporter/src/sarif.rs
+++ b/rust/crates/cpd-reporter/src/sarif.rs
@@ -103,7 +103,7 @@ impl Reporter for SarifReporter {
 
         let sarif = json!({
             "version": "2.1.0",
-            "$schema": "http://json.schemastore.org/sarif-2.1.0.json",
+            "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
             "runs": [{
                 "tool": {
                     "driver": {