Verify distributionUrl and distributionSha256Sum in gradle-wrapper.properties against the official list

gradle / actions

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

https://github.com/marketplace/actions/build-with-gradle

MIT License

164 stars 41 forks source link

Verify distributionUrl and distributionSha256Sum in gradle-wrapper.properties against the official list #286

Open vlsi opened 3 years ago

vlsi commented 3 years ago

Validate gradle/wrapper/gradle-wrapper.properties:

1) Assume distributionUrl points to a canonical Gradle location. If the link is not listed in https://services.gradle.org/versions/all, then fail the validation. 2) For those who want a customized Gradle distribution, add skip-distribution-validation: true|false configuration option (default: false) 3) Enforce the valid distributionSha256Sum for the official distributions

JLLeitschuh commented 3 years ago

I could get behind this feature. @eskatos what are your thoughts?

eskatos commented 3 years ago

This indeed sounds like a good idea

JLLeitschuh commented 3 years ago

@vlsi would you be willing to contribute a PR?

vlsi commented 3 years ago

I'm afraid it would take me a while (I'm not much into TypeScript)