Windows support for Maven trust store config

[reiniercriel]

Summary by Aikido

⚠️ Security Issues: 2	Quality Issues: 0	✅ Resolved Issues: 2

🚀 New Features

• Implemented Windows Maven truststore support and mavenrc override functions.

⚡ Enhancements

• Added shared helpers to install and remove mavenrc override blocks.
• Introduced GetMavenHomeDir for non-Darwin platforms with config fallback.
• Updated Maven setup step to resolve home dir and apply overrides.

🔧 Refactors

• Refactored macOS Maven handling to use shared mavenrc helper functions.

^{More info}

[aikido-pr-checks]

Potential file inclusion attack via reading file - high severity
If an attacker can control the input leading into the ReadFile function, they might be able to read sensitive files and launch further attacks with that information.

Show Fix

Aikido AutoFix Patch Suggestion - medium confidence
This patch mitigates potential file inclusion attacks by implementing input validation for the ReadFile function.

This will fix the Potential file inclusion attack via reading file issue detected on line: 45.

Suggested change

	data, err := os.ReadFile(mavenrcPath)
	if strings.Contains(mavenrcPath, "../") || strings.Contains(mavenrcPath, "..\\") {
	return fmt.Errorf("invalid file path")
	}
	data, err := os.ReadFile(mavenrcPath)

^{View details in Aikido Security}

[aikido-pr-checks]

Potential file inclusion attack via reading file - high severity
If an attacker can control the input leading into the ReadFile function, they might be able to read sensitive files and launch further attacks with that information.

Show Fix

Aikido AutoFix Patch Suggestion - medium confidence
This patch mitigates potential file inclusion attacks by implementing input validation for the ReadFile function.

This will fix the Potential file inclusion attack via reading file issue detected on line: 16.

Suggested change

	content := ""
	if data, err := os.ReadFile(mavenrcPath); err == nil {
	if strings.Contains(mavenrcPath, "../") || strings.Contains(mavenrcPath, "..\\") {
	return fmt.Errorf("invalid file path")
	}
	content := ""
	if data, err := os.ReadFile(mavenrcPath); err == nil {

^{View details in Aikido Security}