setup-gradle

Abandoned

gradle/gradle-build-action · MIT · archived

Execute your Gradle build and trigger dependency submission

★ 685 starsLast commit 2 years agoLatest v3.5.0

/ 100

Security signals

OpenSSF Scorecard3.4 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilities1 advisory(ies)

CVE-2023-30853high
Data written to GitHub Actions Cache may expose secrets
Published May 1, 2023

How to use it safely

Recommended: pin to commit SHA

uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0

Mutable tags like v3.5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0

Score breakdown

Security (35%)40

Popularity (20%)55

Maintenance (30%)0

Reliability (15%)0

Add this badge to your README

Markdown

[![ActionRank](https://actionrank.dev/api/badge/gradle-gradle-build-action)](https://actionrank.dev/actions/gradle-gradle-build-action)

HTML version

HTML

<a href="https://actionrank.dev/actions/gradle-gradle-build-action"><img src="https://actionrank.dev/api/badge/gradle-gradle-build-action" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

setup-gradle

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for setup-gradle