pkg/tls: remove InsecureSkipVerify=true flag
code scanning alert flag this. Seems OK to just remove it.
@@ -108,11 +108,6 @@ func loadRoots(caPath string) (*x509.CertPool, error) {
// NewHTTPSTransport returns an HTTP transport configured using tls.Config
func NewHTTPSTransport(cc *tls.Config) *http.Transport {
- // this seems like a bad idea but was here in the previous version
- if cc != nil {
- cc.InsecureSkipVerify = true
- }
-
tr := &http.Transport{
Proxy: http.ProxyFromEnvironment,
Dial: (&net.Dialer{
