Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
Verifying Gradle Wrappers with GitHub Actions
(
gradle.org
)
2 points
by
naruhodo
on March 1, 2020
|
hide
|
past
|
favorite
|
1 comment
naruhodo
on March 1, 2020
[–]
> The gradle-wrapper.jar is a binary blob of executable code that is checked into nearly 2.8 Million GitHub Repositories.
Which I find terrifying. It's a trap for the unwary.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Which I find terrifying. It's a trap for the unwary.