build
4 guardrails, all at version v1.
| Guardrail | Default severity | What it checks |
|---|---|---|
build/dependency-updates-configured | warning | The repository configures a tool that opens the dependency update, so upgrades arrive as reviewable pull requests rather than as a task nobody has time for. |
build/gradle-version-floor | warning | The Gradle version the wrapper pins is at or above the floor the team sets, so the build runs on a toolchain that is still supported. |
build/runs-on-hosted-ci | error | The artifact was built by a CI platform rather than on somebody's workstation, so the build is attributable and repeatable. |
build/wrapper-distribution-verified | error | The Gradle wrapper pins the checksum of the distribution it downloads, so the toolchain cannot be swapped underneath the build. |
Every guardrail in this category is configured the same way, in the guardrails.checks array of buildnote.json. See Configuring guardrails for every option, and Guardrails to search the whole library.