diff options
| author | Linus Färnstrand <linus@mullvad.net> | 2024-09-25 09:15:30 +0200 |
|---|---|---|
| committer | Linus Färnstrand <linus@mullvad.net> | 2024-09-25 13:02:24 +0200 |
| commit | 158017ac9f7c8531f6428854a2516ea94e82a551 (patch) | |
| tree | 5f6781774047a6312332a357a554f35b9fd678a2 /.github/workflows | |
| parent | 453410bb6f82a50be19a1a328619a1b5c8a128ef (diff) | |
| download | mullvadvpn-158017ac9f7c8531f6428854a2516ea94e82a551.tar.xz mullvadvpn-158017ac9f7c8531f6428854a2516ea94e82a551.zip | |
Run android-validate-gradle-wrapper on every matching push
This prevents the following possible ways of commiting a malicious
gradle-wrapper.jar to the repository:
* Commiting to another path than the one previously specified
* Pushing to `main` without going through a PR
Diffstat (limited to '.github/workflows')
| -rw-r--r-- | .github/workflows/android-validate-gradle-wrapper.yml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/.github/workflows/android-validate-gradle-wrapper.yml b/.github/workflows/android-validate-gradle-wrapper.yml index a669f49e44..94c3239705 100644 --- a/.github/workflows/android-validate-gradle-wrapper.yml +++ b/.github/workflows/android-validate-gradle-wrapper.yml @@ -2,10 +2,10 @@ name: "Android - Validate gradle wrapper" on: workflow_dispatch: - pull_request: + push: paths: - .github/workflows/android-validate-gradle-wrapper.yml - - android/gradle/wrapper/gradle-wrapper.jar + - '**/gradle-wrapper.jar' permissions: {} |