Adding Gradle wrapper validator (#36817)

Resolves https://github.com/fleetdm/fleet/security/code-scanning/1484

Fix uses OSSF feature:
https://github.com/ossf/scorecard/issues/1815
This commit is contained in:
Victor Lyuboslavsky 2025-12-08 09:23:38 -06:00 committed by GitHub
parent 321ed1dc12
commit a1fd214713
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -34,6 +34,9 @@ jobs:
with:
persist-credentials: false
- name: Validate Gradle wrapper
uses: gradle/actions/wrapper-validation@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
- name: "Run analysis"
uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
with: