From 59b4ad0ae1720013a8bb0ab52145e01e0f31801a Mon Sep 17 00:00:00 2001 From: rory Date: Thu, 22 Oct 2026 15:28:04 -0700 Subject: [PATCH] ci: block compromised Java certificates Apply the shared eMudhra certificate blocklist after Java setup and cache restoration, before Java network operations. Keep the selected JVM protected when nested Android actions would otherwise replace it. Source: https://github.com/Expensify/GitHub-Actions/pull/117 --- .github/workflows/build-android.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml index ac571b8b3..8a247e080 100644 --- a/.github/workflows/build-android.yml +++ b/.github/workflows/build-android.yml @@ -41,6 +41,9 @@ jobs: distribution: 'zulu' java-version: 17 + - name: Block compromised Java certificates + uses: Expensify/GitHub-Actions/block-compromised-java-certificates@main + # v6.0.0 - name: Setup Node.js uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903