gradle / gradle/actions

Verify distributionUrl and distributionSha256Sum in gradle-wrapper.properties against the official list

Open
#286 13 comments 6 reactions 0 assignees View on GitHub
enhancement in:wrapper-validation
Dominant language
TypeScript
Stars
340
Forks
117
Avg merge
1d 9h
Merged PRs (30d)
11

Description

Validate `gradle/wrapper/gradle-wrapper.properties`:

1) Assume `distributionUrl` points to a canonical Gradle location. If the link is not listed in https://services.gradle.org/versions/all, then fail the validation.
2) For those who want a customized Gradle distribution, add `skip-distribution-validation: true|false` configuration option (`default: false`)
3) Enforce the valid `distributionSha256Sum` for the official distributions

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.