lwjgl3 icon indicating copy to clipboard operation
lwjgl3 copied to clipboard

Add GitHub Actions workflow to validate the Gradle wrapper

Open TheMrMilchmann opened this issue 2 years ago • 0 comments

This PR adds a GitHub Actions workflow to validate the (binary) gradle-wrapper.jar. This is achieved by using the official Gradle Wrapper Validation Action from the Gradle team.

The motivation behind this change is to provide better protection against potentially malicious contributions. As an added bonus, reviewing contributions such as #693 gets significantly easier. However, the action only verifies the gradle-wrapper.jar and not the gradlew scripts that are frequently updated together with the wrapper.

Also, note that this should eventually be merged into a general CI workflow if one is added to this repository.

An example run can be found here.

TheMrMilchmann avatar Dec 20 '21 17:12 TheMrMilchmann