dh4 / WeatherRadar

An Android application featuring customizable, real-time doppler radar images
GNU General Public License v3.0
47 stars 8 forks source link

Update gradle-wrapper.properties #1

Closed Poussinou closed 6 years ago

Poussinou commented 6 years ago

Hi,

This small PR adds the distributionSha256Sum property to gradle-wrapper.properties. It allows for verification of the downloaded Gradle distribution via SHA-256 hash sum comparison.

You can find some documentation about this security improvement here, and the sums for each version of gradle here.

Note that you need to update this property every time you change your version of gradle.

dh4 commented 6 years ago

Merged this patch. Thanks!

Will a new version need to be released for F-Droid with distributionSha256Sum set or is it sufficient to have it in the next version?

Poussinou commented 6 years ago

It's totally sufficient to have it in the next version, this isn't really related to F-Droid, just a more secured way to deal with gradle (and F-Droid love security ;) )