-
-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Integrate gradle validation in normal test workflow #6001
Conversation
@@ -208,3 +208,11 @@ jobs: | |||
CI: "false" # we pretend to run locally - even if tests fail on the CI, they count towards test coverage | |||
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |||
DBMS: "postgresql" | |||
# This is https://github.com/marketplace/actions/gradle-wrapper-validation | |||
# It ensures that the jar file is from gradle and not by a strange third party. | |||
gradlevalidation: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It should run before any gradle task otherwise it's nonsene
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
They run in parallel as you see below...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe it's even easier to just include the step before running any Gradle actions, i.e. first step after checkout uses: gradle/wrapper-validation-action@v1
. Dunno how long the task takes, but in that case we are sure that the test action fails which will be valued a lot more than just a parallel task that can be ignored?
But it's ok like that as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's unlikely that we get get a malicious file...
* upstream/master: (21 commits) Squashed 'src/main/resources/csl-locales/' changes from 4fa753374e..d73af4a3fe Squashed 'src/main/resources/csl-styles/' changes from 9e81857..f03dece Add deep link to uni Basel Refine information on codacy New Crowdin translations (#6020) Fix l10n New Crowdin translations (#6016) Fix teamscale link - and sort list alphabetically Update code-quality.md Update link to codacy/JabRef Integrate gradle validation in normal test workflow (#6001) Update CleanupUrlFormatter.java Update URLUtil.java Fix modernizer warnings Remove unused error prone Use Java version class Remove commented out code Upgrade deprecated gradle API Add plugin scope New menu "Lookup" ...
* upstream/master: Fix teamscale link - and sort list alphabetically Update code-quality.md Update link to codacy/JabRef Integrate gradle validation in normal test workflow (#6001) Fixed group drag-n-drop not working after inserting an article into a group (#6008) New Crowdin translations (#5998) Bump richtextfx from 0.10.3 to 0.10.4 (#6007) Bump unirest-java from 3.5.00 to 3.6.00 (#6006) Bump com.github.ben-manes.versions from 0.27.0 to 0.28.0 (#6004) Bump classgraph from 4.8.64 to 4.8.65 (#6003) Bump mockito-core from 3.2.4 to 3.3.0 (#6005)
I don't think we need an extra workflow for the gradle wrapper validation.