From 655c2c0112abc0e07a5c649de42e2f467c818014 Mon Sep 17 00:00:00 2001 From: miroslavpojer Date: Fri, 8 Nov 2024 15:00:18 +0100 Subject: [PATCH] #108 - Do Not Persist Credentials - Workflows (#109) - Disabled saving of credential in all checkout actions. --- .github/workflows/release_draft.yml | 2 ++ .github/workflows/test.yml | 5 +++++ 2 files changed, 7 insertions(+) diff --git a/.github/workflows/release_draft.yml b/.github/workflows/release_draft.yml index 3e8fd46d..116c1997 100644 --- a/.github/workflows/release_draft.yml +++ b/.github/workflows/release_draft.yml @@ -29,6 +29,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - name: Validate format of received tag uses: actions/github-script@v7 @@ -85,6 +86,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - uses: actions/setup-python@v5.1.1 with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 710a967f..d4a34de8 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -28,6 +28,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4 + with: + persist-credentials: false - name: Set up Python uses: actions/setup-python@v5 @@ -60,6 +62,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4.1.5 + with: + persist-credentials: false - name: Set up Python uses: actions/setup-python@v5.1.0 @@ -88,6 +92,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - uses: actions/setup-python@v5 with: