ActionRank
Check your actions

Gradle Wrapper Validation

Abandoned

gradle/wrapper-validation-action · MIT · archived

Gradle Wrapper Validation Action

★ 279 starsLast commit 2 years agoLatest v3.5.0
F
24
/ 100
Security 40Maintenance 0Popularity 48Reliability 0

Security signals

OpenSSF Scorecard3.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0

Mutable tags like v3.5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0

Score breakdown

Security (35%)40
Popularity (20%)48
Maintenance (30%)0
Reliability (15%)0