migrate to built-in gradle dependency verification

closes #693
grote · Jun 1, 2021 · a655763 · a655763
1 parent fb7682f
commit a655763
Show file tree

Hide file tree

Showing 6 changed files with 2,590 additions and 225 deletions.
diff --git a/app/build.gradle b/app/build.gradle
@@ -2,8 +2,6 @@ apply plugin: 'com.android.application'
 apply plugin: 'kotlin-android'
 apply plugin: 'kotlin-android-extensions'
 apply plugin: 'kotlin-kapt'
-apply plugin: 'witness'
-apply from: 'witness.gradle'
 
 android {
 

diff --git a/app/libs/gradle-witness.jar b/app/libs/gradle-witness.jar
diff --git a/app/witness.gradle b/app/witness.gradle
diff --git a/build.gradle b/build.gradle
@@ -14,7 +14,6 @@ buildscript {
 	dependencies {
 		classpath 'com.android.tools.build:gradle:4.1.3'
 		classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$kotlinVersion"
-		classpath files('app/libs/gradle-witness.jar')
 	}
 
 }

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
diff --git a/update-dependency-pinning.sh b/update-dependency-pinning.sh
@@ -1,7 +1,6 @@
 #!/bin/bash
 
-WITNESS=app/witness.gradle
+rm ./gradle/verification-metadata.xml
 
-echo "" > $WITNESS
-./gradlew -q calculateChecksums | grep -Ev "^(Skipping|Verifying)" | grep -Ev "files-2.1:|caches:transforms-3:|:build-tools:core-lambda-stubs.jar:|:platforms:android.jar:|-linux.jar:" > $WITNESS
+./gradlew --write-verification-metadata sha256 build