[SourceList] Warn when adding a git source using the git procotol

1 files changed, 6 insertions, 1 deletions

diff --git a/lib/bundler/source_list.rb b/lib/bundler/source_list.rb
index fdc77cb23d..cc67a72194 100644
--- a/lib/bundler/source_list.rb
+++ b/lib/bundler/source_list.rb
@@ -22,7 +22,12 @@ module Bundler
     end
 
     def add_git_source(options = {})
-      add_source_to_list Source::Git.new(options), git_sources
+      source = add_source_to_list Source::Git.new(options), git_sources
+      if source.uri =~ /^git:/
+        Bundler.ui.warn "The git source `#{source.uri}` uses the `git` protocol, " \
+                        "please consider changing it to `https`, which is more secure."
+      end
+      source
     end
 
     def add_rubygems_source(options = {})