CI: Add step that validates the Gradle wrapper

Validates the gradle-wrapper.jar file on each build, which is a binary blob of executable code. This action ensures it's legit and doesn't execute malicious code. See https://github.com/gradle/wrapper-validation-action
beemdevelopment · May 4, 2021 · e371485 · e371485
1 parent fb58c87
commit e371485
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build-app-workflow.yaml b/.github/workflows/build-app-workflow.yaml
@@ -6,5 +6,7 @@ jobs:
     steps:
       - name: Checkout the code
         uses: actions/checkout@v2
+      - name: Validate Gradle wrapper
+        uses: gradle/wrapper-validation-action@e2c57acffb2c9aa5a8dc6eda2bbae0b6e495bd4c
       - name: Build the app
         run: ./gradlew build