diff --git a/.github/workflows/demo-job-summary.yml b/.github/workflows/demo-job-summary.yml index f238d587..24678645 100644 --- a/.github/workflows/demo-job-summary.yml +++ b/.github/workflows/demo-job-summary.yml @@ -46,7 +46,7 @@ jobs: run: | ./gradlew tasks --no-daemon ./gradlew help check - ./gradlew wrapper --gradle-version 8.7 --gradle-distribution-sha256-sum 544c35d6bd849ae8a5ed0bcea39ba677dc40f49df7d1835561582da2009b961d + ./gradlew :wrapper --gradle-version 8.7 --gradle-distribution-sha256-sum 544c35d6bd849ae8a5ed0bcea39ba677dc40f49df7d1835561582da2009b961d - name: Fail groovy-dsl project working-directory: .github/workflow-samples/groovy-dsl continue-on-error: true diff --git a/docs/wrapper-validation.md b/docs/wrapper-validation.md index a5f682fa..5943ffc4 100644 --- a/docs/wrapper-validation.md +++ b/docs/wrapper-validation.md @@ -111,7 +111,7 @@ we highly recommend that you reach out to us at [security@gradle.com](mailto:sec #### Unverifiable Wrapper Jars Wrapper Jars generated by Gradle versions `3.3` to `4.0` are not verifiable because those files were dynamically generated by Gradle in a non-reproducible way. It's not possible to verify the `gradle-wrapper.jar` for those versions are legitimate using a hash comparison. If you have a validation failure, you should try to determine if the `gradle-wrapper.jar` was generated by one of these versions before running the build. -- If the Gradle version in `gradle-wrapper.properties` is outside of this range, you can regenerate the `gradle-wrapper.jar` by running `./gradlew wrapper`. This will generate a new, verifiable wrapper jar. +- If the Gradle version in `gradle-wrapper.properties` is outside of this range, you can regenerate the `gradle-wrapper.jar` by running `./gradlew :wrapper`. This will generate a new, verifiable wrapper jar. - If you need to run your build with a version of Gradle between 3.3 and 4.0, you can use a newer version of Gradle to generate the `gradle-wrapper.jar`. #### Wrapper Jar stored with Git LFS