chore: Add Gradle wrapper checksum verification (GRADLE-104) (#1247) #3358
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - release/** | |
| pull_request: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| job_build_upload: | |
| name: Build and upload distribution artifact | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout current commit (${{ github.sha }}) | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - name: Setup Gradle | |
| uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # pin@v6 | |
| with: | |
| cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }} | |
| - name: Set up Java | |
| uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '17' | |
| - name: Build Gradle Plugin, Kotlin Compiler Plugin, and Snapshots Runtime distribution artifacts | |
| run: ./gradlew assemble | |
| - name: Archive artifacts | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 | |
| with: | |
| name: ${{ github.sha }} | |
| path: | | |
| ./*/build/distributions/*.zip | |
| - name: Verify artifact contents | |
| shell: bash | |
| run: | | |
| zipfile=$(ls -1 plugin-build/build/distributions | grep -v "PluginMarker" | grep -v ".tar") | |
| filename=${zipfile/\.zip/} | |
| unzip plugin-build/build/distributions/$filename.zip -d /tmp | |
| find /tmp/$filename | grep "pom-default.xml" | |
| unzip /tmp/$filename/$filename.jar -d /tmp/jar/ | |
| find /tmp/jar | grep "bin/sentry-cli" | |
| cat /tmp/$filename/pom-default.xml | grep -v "dev.gradleplugins" |