Validate gradle wrapper binaries in CI

Author: complexspaces

.github/workflows/ci.yml

@@ -196,6 +196,10 @@ jobs:
       - uses: actions/checkout@v3
         with:
           persist-credentials: false
+
+      # Ensure only legitimate Gradle wrapper binaries can be merged into `main`
+      - name: Validate Gradle Wrappers
+        uses: gradle/wrapper-validation-action@56b90f209b02bf6d1deae490e9ef18b21a389cd4 # 1.1.0
 
       - name: Verify release artifact
         run: ./ci/verify_android_release.sh