From f96bac1f53f49933e733b5308e3e85f1c15d0ddb Mon Sep 17 00:00:00 2001 From: "Sean C. Sullivan" Date: Mon, 14 Sep 2020 20:00:00 -0700 Subject: [PATCH 1/2] enable Gradle wrapper validation https://blog.gradle.org/gradle-wrapper-checksum-verification-github-action --- .github/workflows/gradle-wrapper-validation.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/workflows/gradle-wrapper-validation.yml diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml new file mode 100644 index 00000000..af99da16 --- /dev/null +++ b/.github/workflows/gradle-wrapper-validation.yml @@ -0,0 +1,10 @@ +name: "Gradle Wrapper" +on: [push, pull_request] + +jobs: + validation: + name: "validation" + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - uses: gradle/wrapper-validation-action@v1 From 8afd8f3180d09b036b9642c605fba9b2ca3c78d9 Mon Sep 17 00:00:00 2001 From: "Sean C. Sullivan" Date: Mon, 14 Sep 2020 20:01:27 -0700 Subject: [PATCH 2/2] enable Dependabot v2 https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/ --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..1ef0730a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "daily" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily"