Gradle: Keep only global plugins in root build.gradle.kts #6

	name: Security
	on: [push]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	mobfs:
	permissions:
	contents: read # for actions/checkout to fetch code
	security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Setup Python 3.10
	uses: actions/setup-python@v4
	with:
	python-version: '3.11'
	- name: Run mobsfscan
	uses: MobSF/[email protected]
	with:
	args: . --sarif --output results.sarif \|\| true
	- name: Upload mobsfscan report
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: results.sarif

	gradle-validate:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: gradle/wrapper-validation-action@v1

Provide feedback