Sync workflow setup with other Java repos

Author: trask

.github/workflows/build.yml

@@ -12,13 +12,6 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  gradle-wrapper-validation:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
-
   build:
     runs-on: ${{ matrix.os }}
     strategy:
@@ -52,12 +45,9 @@ jobs:
 
   required-status-check:
     needs:
-      - gradle-wrapper-validation
       - build
     runs-on: ubuntu-latest
     if: always()
     steps:
-      - if: |
-          needs.gradle-wrapper-validation.result != 'success' ||
-          needs.build.result != 'success'
+      - if: needs.build.result != 'success'
         run: exit 1

.github/workflows/gradle-wrapper-validation.yml

@@ -0,0 +1,17 @@
+name: Gradle wrapper validation
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  gradle-wrapper-validation:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      # this needs to be in its own workflow in order to make OSSF scorecard happy
+      - uses: gradle/actions/wrapper-validation@06832c7b30a0129d7fb559bcc6e43d26f6374244 # v4.3.1