From 9b519c7456e2a6d29be99090972ff6ce58daa314 Mon Sep 17 00:00:00 2001 From: Nick Logan Date: Mon, 16 Dec 2024 17:23:14 -0800 Subject: [PATCH] Do not persist tokens in local git config As reported by zizmor --- .github/workflows/tests.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index dc79e7e4..4b631635 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -13,6 +13,9 @@ jobs: steps: - uses: actions/checkout@v4 + with: + persist-credentials: false + - uses: Raku/setup-raku@v1 with: raku-version: ${{ matrix.raku-version }}