Skip to content

Commit

Permalink
Run android-validate-gradle-wrapper on every matching push
Browse files Browse the repository at this point in the history
This prevents the following possible ways of commiting a malicious
gradle-wrapper.jar to the repository:
* Commiting to another path than the one previously specified
* Pushing to `main` without going through a PR
  • Loading branch information
faern committed Sep 25, 2024
1 parent 453410b commit 158017a
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions .github/workflows/android-validate-gradle-wrapper.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@ name: "Android - Validate gradle wrapper"

on:
workflow_dispatch:
pull_request:
push:
paths:
- .github/workflows/android-validate-gradle-wrapper.yml
- android/gradle/wrapper/gradle-wrapper.jar
- '**/gradle-wrapper.jar'

permissions: {}

Expand Down

0 comments on commit 158017a

Please sign in to comment.