Skip to content

Commit aa9484e

Browse files
authored
Merge pull request #436 from ZacSweers/z/verifyChecksum
Add checkGradleChecksum.sh to verify gradle wrapper jars on CI
2 parents d7ea2f3 + e892d07 commit aa9484e

File tree

2 files changed

+29
-0
lines changed

2 files changed

+29
-0
lines changed

.ci/checkGradleChecksum.sh

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
#!/bin/bash
2+
3+
# First parse the gradle version from its gradle-wrapper.properties file
4+
GRADLE_WRAPPER_PROPERTIES_FILE=gradle/wrapper/gradle-wrapper.properties
5+
GRADLE_URL_PREFIX="https\://services.gradle.org/distributions/gradle-"
6+
GRADLE_URL_SUFFIX="-all.zip"
7+
8+
function prop {
9+
grep "${1}" ${GRADLE_WRAPPER_PROPERTIES_FILE}|cut -d'=' -f2
10+
}
11+
12+
GRADLE_VERSION_URL=$(prop "distributionUrl")
13+
GRADLE_VERSION_STRIPPED_PREFIX=${GRADLE_VERSION_URL#"$GRADLE_URL_PREFIX"}
14+
GRADLE_VERSION=${GRADLE_VERSION_STRIPPED_PREFIX%"$GRADLE_URL_SUFFIX"}
15+
16+
# Now compare against gradle's distribution upstream with sha256sum
17+
echo "Checking Gradle wrapper jar for version: ${GRADLE_VERSION}"
18+
cd gradle/wrapper
19+
curl --location --output gradle-wrapper.jar.sha256 \
20+
https://services.gradle.org/distributions/gradle-${GRADLE_VERSION}-wrapper.jar.sha256
21+
echo " gradle-wrapper.jar" >> gradle-wrapper.jar.sha256
22+
sha256sum --check gradle-wrapper.jar.sha256
23+
if [[ $? != 0 ]]; then
24+
echo "Gradle wrapper failed checksum verification. Please investigate." >&2
25+
exit $?
26+
fi
27+
rm gradle-wrapper.jar.sha256
28+
cd ../..

.travis.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ env:
55
- NODE_VERSION="6.10.2"
66
before_install:
77
- nvm install $NODE_VERSION
8+
- ./.ci/checkGradleChecksum.sh
89
install: true
910
script:
1011
- ./.ci/ci.sh

0 commit comments

Comments
 (0)