Skip to content

Commit af689b6

Browse files
authored
Add Gradle wrapper validation (#2004)
Check Gradle wrapper with gradle/actions/wrapper-validation to avoid supply chain attacks
1 parent 8215caf commit af689b6

File tree

3 files changed

+27
-0
lines changed

3 files changed

+27
-0
lines changed

.github/workflows/build.yml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,14 @@ concurrency:
1010
cancel-in-progress: true
1111

1212
jobs:
13+
14+
validation:
15+
name: "Validation"
16+
runs-on: ubuntu-latest
17+
steps:
18+
- uses: actions/checkout@v4
19+
- uses: gradle/actions/wrapper-validation@v4
20+
1321
build-client:
1422
name: "PhotonClient Build"
1523
defaults:
@@ -44,6 +52,7 @@ jobs:
4452

4553
name: "Photonlib - Build Examples - ${{ matrix.os }}"
4654
runs-on: ${{ matrix.os }}
55+
needs: [validation]
4756

4857
steps:
4958
- name: Checkout code
@@ -71,6 +80,7 @@ jobs:
7180
build-gradle:
7281
name: "Gradle Build"
7382
runs-on: ubuntu-22.04
83+
needs: [validation]
7484
steps:
7585
# Checkout code.
7686
- name: Checkout code
@@ -130,6 +140,7 @@ jobs:
130140
build-photonlib-vendorjson:
131141
name: "Build Vendor JSON"
132142
runs-on: ubuntu-22.04
143+
needs: [validation]
133144
steps:
134145
- uses: actions/checkout@v4
135146
with:
@@ -174,6 +185,7 @@ jobs:
174185

175186
name: "Photonlib - Build Host - ${{ matrix.artifact-name }}"
176187
runs-on: ${{ matrix.os }}
188+
needs: [validation]
177189
steps:
178190
- uses: actions/checkout@v4
179191
with:
@@ -217,6 +229,7 @@ jobs:
217229
runs-on: ubuntu-22.04
218230
container: ${{ matrix.container }}
219231
name: "Photonlib - Build Docker - ${{ matrix.artifact-name }}"
232+
needs: [validation]
220233
steps:
221234
- uses: actions/checkout@v4
222235
with:

.github/workflows/lint-format.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,12 @@ concurrency:
1010
cancel-in-progress: true
1111

1212
jobs:
13+
validation:
14+
name: "Validation"
15+
runs-on: ubuntu-latest
16+
steps:
17+
- uses: actions/checkout@v4
18+
- uses: gradle/actions/wrapper-validation@v4
1319
wpiformat:
1420
name: "wpiformat"
1521
runs-on: ubuntu-22.04
@@ -40,6 +46,7 @@ jobs:
4046
if: ${{ failure() }}
4147
javaformat:
4248
name: "Java Formatting"
49+
needs: [validation]
4350
runs-on: ubuntu-22.04
4451
steps:
4552
- uses: actions/checkout@v4

.github/workflows/photon-api-docs.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,12 @@ permissions:
1616
id-token: write
1717

1818
jobs:
19+
validation:
20+
name: "Validation"
21+
runs-on: ubuntu-latest
22+
steps:
23+
- uses: actions/checkout@v4
24+
- uses: gradle/actions/wrapper-validation@v4
1925
build_demo:
2026
name: Build PhotonClient Demo
2127
defaults:
@@ -39,6 +45,7 @@ jobs:
3945

4046
run_java_cpp_docs:
4147
name: Build Java and C++ API Docs
48+
needs: [validation]
4249
runs-on: "ubuntu-22.04"
4350
steps:
4451
- name: Checkout code

0 commit comments

Comments
 (0)