feat(scorecard) added gradle wrapper validation check (#2343)

bugsnag · Feb 19, 2025 · 90ea4e7 · 90ea4e7
1 parent 2f8d460
commit 90ea4e7
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -71,3 +71,10 @@ jobs:
         uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
         with:
           sarif_file: results.sarif
+
+  gradle-wrapper-validation:
+    name: "Checksum validation of Gradle Wrappers"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: gradle/actions/wrapper-validation@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0