# G.codefresh.io not using https

**URL:** <https://community.codefresh.io/t/g-codefresh-io-not-using-https/399>\
**Category:** Administration\
**Created:** [July 17, 2020, 10:11pm UTC](https://community.codefresh.io/t/g-codefresh-io-not-using-https/399 "2020-07-17T22:11:13Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![pjaol](https://sea1.discourse-cdn.com/flex019/user_avatar/community.codefresh.io/pjaol/32/267_2.png) [@pjaol](https://community.codefresh.io/u/pjaol)\
**Post date:** [July 17, 2020, 10:11pm UTC](https://community.codefresh.io/t/g-codefresh-io-not-using-https/399/1 "2020-07-17T22:11:13Z")

</div>

Folks I’m getting insecure website alerts on [g.codefresh.io](http://g.codefresh.io)  
It’s not using SSL

There are AWS credentials flying about over the internet here, please correct immediately

 ![codefresh_ssl](https://us1.discourse-cdn.com/flex019/uploads/codefreshtest/original/1X/5877c7ad2ff232c6232532b8594598165e356840.gif)

---

<div class="post-metadata">

**Author:** ![kristofer](https://sea1.discourse-cdn.com/flex019/user_avatar/community.codefresh.io/kristofer/32/19_2.png) [@kristofer](https://community.codefresh.io/u/kristofer)\
**Post date:** [July 18, 2020, 5:58pm UTC](https://community.codefresh.io/t/g-codefresh-io-not-using-https/399/2 "2020-07-18T17:58:06Z")

</div>

Hey, thanks for letting us know, we’re on this right now.

A preliminary look indicates that it’s pulling some icons from an http source, but we’re going to confirm and fix. We’ll keep you all posted.

---

<div class="post-metadata">

**Author:** ![kristofer](https://sea1.discourse-cdn.com/flex019/user_avatar/community.codefresh.io/kristofer/32/19_2.png) [@kristofer](https://community.codefresh.io/u/kristofer)\
**Post date:** [July 18, 2020, 6:08pm UTC](https://community.codefresh.io/t/g-codefresh-io-not-using-https/399/3 "2020-07-18T18:08:40Z")

</div>

Hey, just confirmed, it is indeed only the icons. We are fixing this ASAP, but any and all information transferred to and from Codefresh are kept secure. Thank you very much for letting us know.

---

<div class="post-metadata">

**Author:** ![pjaol](https://sea1.discourse-cdn.com/flex019/user_avatar/community.codefresh.io/pjaol/32/267_2.png) [@pjaol](https://community.codefresh.io/u/pjaol)\
**Post date:** [July 18, 2020, 11:12pm UTC](https://community.codefresh.io/t/g-codefresh-io-not-using-https/399/4 "2020-07-18T23:12:29Z")

</div>

Hi Kristofer

It was loading the main html from port 80  
The Json was still going over 443 but the top level window being on 80 was triggering  
the unsecured alert.

HTH  
Patrick

---

<div class="post-metadata">

**Author:** ![Kostis](https://sea1.discourse-cdn.com/flex019/user_avatar/community.codefresh.io/kostis/32/391_2.png) [@Kostis](https://community.codefresh.io/u/Kostis)\
**Post date:** [July 22, 2020, 9:29am UTC](https://community.codefresh.io/t/g-codefresh-io-not-using-https/399/5 "2020-07-22T09:29:55Z")

</div>

Hello

We have applied a fix. Can you please check again?

---

<div class="post-metadata">

**Author:** ![pjaol](https://sea1.discourse-cdn.com/flex019/user_avatar/community.codefresh.io/pjaol/32/267_2.png) [@pjaol](https://community.codefresh.io/u/pjaol)\
**Post date:** [July 22, 2020, 2:00pm UTC](https://community.codefresh.io/t/g-codefresh-io-not-using-https/399/6 "2020-07-22T14:00:05Z")

</div>

Thanks it looks good, i check http as well appears to redirect with a 307 which is the correct thing to do.  
Appreciate you folks fixing it!

![image.png](https://us1.discourse-cdn.com/flex019/uploads/codefreshtest/original/1X/a89a36bd844dbb6556189fd530468ad95e82e837.png)