Merge pull request #365 from dbast/master

Update the verification-metadata if in use for dependency verification
gradle-update · Dec 28, 2021 · f5b62b2 · f5b62b2
2 parents eae49ec + ee7ae38
commit f5b62b2
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/dist/index.js b/dist/index.js
@@ -1301,10 +1301,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.createWrapperUpdater = void 0;
 const core = __importStar(__nccwpck_require__(2186));
 const cmd = __importStar(__nccwpck_require__(816));
+const fs_1 = __importDefault(__nccwpck_require__(5747));
 function createWrapperUpdater(wrapper, targetRelease, setDistributionChecksum) {
     return new WrapperUpdater(wrapper, targetRelease, setDistributionChecksum);
 }
@@ -1330,6 +1334,9 @@ class WrapperUpdater {
                     : this.targetRelease.allChecksum;
                 args = args.concat(['--gradle-distribution-sha256-sum', sha256sum]);
             }
+            if (fs_1.default.existsSync('gradle/verification-metadata.xml')) {
+                args = args.concat(['--write-verification-metadata', 'sha256']);
+            }
             const { exitCode, stderr } = yield cmd.execWithOutput('./gradlew', args, this.wrapper.basePath);
             if (exitCode !== 0) {
                 throw new Error(stderr);

diff --git a/src/wrapperUpdater.ts b/src/wrapperUpdater.ts
@@ -15,6 +15,7 @@
 import * as core from '@actions/core';
 
 import * as cmd from './cmd';
+import fs from 'fs';
 import type {IWrapperInfo} from './wrapperInfo';
 import type {Release} from './releases';
 
@@ -66,6 +67,11 @@ class WrapperUpdater implements IWrapperUpdater {
       args = args.concat(['--gradle-distribution-sha256-sum', sha256sum]);
     }
 
+    // Update verification data, if used
+    if (fs.existsSync('gradle/verification-metadata.xml')) {
+      args = args.concat(['--write-verification-metadata', 'sha256']);
+    }
+
     const {exitCode, stderr} = await cmd.execWithOutput(
       './gradlew',
       args,