Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Disable uploading Gradle build cache for PR
Motivation: We got a bug bounty report that `upload-build-cache` can leak GitHub secrets if an attacker modifies `gradlew` file. Modifications: - Remove `upload-build-cache` to resolve the vulnerbility. Result: - Fixed a vulnerbility in the Gradle Build cache job.
- Loading branch information