wrapper-validation-action icon indicating copy to clipboard operation
wrapper-validation-action copied to clipboard

Published 20 hours ago • verified publisher icon gradle

Verify distributionUrl and distributionSha256Sum in gradle-wrapper.properties against the official list

Open vlsi opened this issue 4 years ago • 4 comments

Validate gradle/wrapper/gradle-wrapper.properties:

  1. Assume distributionUrl points to a canonical Gradle location. If the link is not listed in https://services.gradle.org/versions/all, then fail the validation.
  2. For those who want a customized Gradle distribution, add skip-distribution-validation: true|false configuration option (default: false)
  3. Enforce the valid distributionSha256Sum for the official distributions

vlsi avatar Mar 17 '21 10:03 vlsi

I could get behind this feature. @eskatos what are your thoughts?

JLLeitschuh avatar Mar 17 '21 14:03 JLLeitschuh

This indeed sounds like a good idea

eskatos avatar Mar 19 '21 10:03 eskatos

@vlsi would you be willing to contribute a PR?

JLLeitschuh avatar Mar 19 '21 16:03 JLLeitschuh

I'm afraid it would take me a while (I'm not much into TypeScript)

vlsi avatar Mar 19 '21 20:03 vlsi