CI: Add step that validates the Gradle wrapper

Validates the gradle-wrapper.jar file on each build, which is a binary blob of executable code. This action ensures it's legit and doesn't execute malicious code.

See https://github.com/gradle/wrapper-validation-action
This commit is contained in:
Ewout ter Hoeven 2021-05-04 21:56:17 +02:00
parent fb58c877d1
commit e371485a1b
No known key found for this signature in database
GPG key ID: 53F3319D3C7F405E

View file

@ -6,5 +6,7 @@ jobs:
steps:
- name: Checkout the code
uses: actions/checkout@v2
- name: Validate Gradle wrapper
uses: gradle/wrapper-validation-action@e2c57acffb2c9aa5a8dc6eda2bbae0b6e495bd4c
- name: Build the app
run: ./gradlew build