Enhance setup-gradle.md with validation details

Added a point about Gradle Wrapper files validation to the setup documentation.
This commit is contained in:
Daz DeBoer 2026-03-27 12:50:52 -06:00 committed by GitHub
parent 39e147cb9d
commit 263d8fe18e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -25,6 +25,7 @@ It is possible to directly invoke Gradle in your workflow, and the `actions/setu
However, the `setup-gradle` action offers a several advantages over this approach:
- Easily [configure your workflow to use a specific version of Gradle](#build-with-a-specific-gradle-version) using the `gradle-version` parameter. Gradle distributions are automatically downloaded and cached.
- [Gradle Wrapper files are automatically validated](#gradle-wrapper-validation) against known checksums
- More sophisticated and more efficient caching of Gradle User Home between invocations, compared to `setup-java` and most custom configurations using `actions/cache`. [More details below](#caching-build-state-between-jobs).
- Detailed reporting of cache usage and cache configuration options allow you to [optimize the use of the GitHub actions cache](#optimizing-cache-effectiveness).
- [Generate and Submit a GitHub Dependency Graph](#github-dependency-graph-support) for your project, enabling Dependabot security alerts.