diff --git a/README.md b/README.md index 69dc722..fab0aa5 100644 --- a/README.md +++ b/README.md @@ -72,3 +72,8 @@ we highly recommend that you reach out to us at [security@gradle.com](mailto:sec If you're curious and want to explore what the differences are between the `gradle-wrapper.jar` in your possession and one of our valid release, you can compare them using this online utility: [DiffScope](https://try.diffoscope.org/). Regardless of what you find, we still kindly request that you reach out to us and let us know about any issues you encountered. + +## Resources + +To learn more about verifying the Gradle Wrapper JAR locally, see our +[guide on the topic](https://docs.gradle.org/current/userguide/gradle_wrapper.html#wrapper_checksum_verification). diff --git a/dist/index.js b/dist/index.js index ed7ff4b..325fbb6 100644 --- a/dist/index.js +++ b/dist/index.js @@ -1645,7 +1645,7 @@ var __importStar = (this && this.__importStar) || function (mod) { }; Object.defineProperty(exports, "__esModule", { value: true }); const httpm = __importStar(__webpack_require__(874)); -const httpc = new httpm.HttpClient('eskatos/gradle-wrapper-check'); +const httpc = new httpm.HttpClient('gradle/wrapper-validation-action'); function fetchValidChecksums(allowSnapshots) { return __awaiter(this, void 0, void 0, function* () { const all = yield httpGetJsonArray('https://services.gradle.org/versions/all'); diff --git a/src/checksums.ts b/src/checksums.ts index 88aed12..5cd51eb 100644 --- a/src/checksums.ts +++ b/src/checksums.ts @@ -1,6 +1,6 @@ import * as httpm from 'typed-rest-client/HttpClient' -const httpc = new httpm.HttpClient('eskatos/gradle-wrapper-check') +const httpc = new httpm.HttpClient('gradle/wrapper-validation-action') export async function fetchValidChecksums( allowSnapshots: boolean