From mobile apps to microservices, from small startups to big enterprises, Gradle helps teams build, automate and deliver better software, faster.

Gradle Community

&gt; The URL is curious; the scheme is http , and the port and path are not familiar to any on our operations team
This is extremely suspicious. Does the server URL you have configured in `settings.gradle(.kts)` match what you expect?

yep, the hostname matches, although it's configured with `https`

Initial thoughts were some sort of internal bootstrapping/migration in the GE plugin or server

The only other thing that comes to mind would be a malicious plugin reconfiguring the scan endpoint :cold_sweat:

Any thoughts on how to troubleshoot/debug this?

Running a scan with `--debug`  shows that GE server is initiating a redirect:
```2023-09-28T10:48:31.024-0700 [DEBUG] [sun.net.www.protocol.http.HttpURLConnection] sun.net.www.MessageHeader@63e3f27211 pairs: {POST /scans/publish/gradle/3.3.4/token HTTP/1.1: null}{Content-Type: application/vnd.gradle.scan-token-request+json}{X-Request-Id: 77183712-e7c1-46b4-a8d1-67abd4b36356}{Accept-Encoding: gzip}{Cache-Control: no-cache}{Pragma: no-cache}{User-Agent: Java/17.0.7}{Host: &lt;REDACTED&gt;}{Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2}{Connection: close}{Content-Length: 149}
2023-09-28T10:48:31.043-0700 [DEBUG] [sun.net.www.protocol.http.HttpURLConnection] sun.net.www.MessageHeader@7b930c088 pairs: {null: HTTP/1.1 302 Found}{Date: Thu, 28 Sep 2023 17:48:31 GMT}{Content-Type: text/html}{Content-Length: 138}{Connection: close}{Cache-Control: no-cache, no-store, must-revalidate}{Location: http://&lt;REDACTED&gt;:9080/internal-starting}{Server: nginx}```

Hi <@U037XLUJ0MP>. I understand you are already discussing this with us via a more private channel. Let's continue the conversation there.

Hi <@U042816HVD0> where is that other discussion happening? I'm not sure I'm part of it