From 4f85be42e47a7017cad21282060165d6e259d366 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Tue, 12 Nov 2024 16:06:09 -0700 Subject: [PATCH] zizmor fixes Thanks, Dr. Zizmor! Signed-off-by: William Woodruff --- .github/workflows/ci.yml | 6 ++++++ .github/workflows/lint.yml | 2 ++ .github/workflows/refresh-bettertls-testcases.yml | 3 +++ .github/workflows/refresh-online-testcases.yml | 2 ++ .github/workflows/regression.yml | 2 ++ .github/workflows/site.yml | 2 ++ 6 files changed, 17 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 71ffac38..0c0c635f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -11,6 +11,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-python@v5 with: @@ -25,6 +27,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-python@v5 with: @@ -51,6 +55,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-go@v5 with: diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index bf069d7f..f0a42f8b 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -11,6 +11,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-python@v5 with: diff --git a/.github/workflows/refresh-bettertls-testcases.yml b/.github/workflows/refresh-bettertls-testcases.yml index 5ac615ab..4bb0c14b 100644 --- a/.github/workflows/refresh-bettertls-testcases.yml +++ b/.github/workflows/refresh-bettertls-testcases.yml @@ -18,6 +18,8 @@ jobs: steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-python@v5 with: @@ -31,6 +33,7 @@ jobs: repository: Netflix/bettertls ref: master path: bettertls + persist-credentials: false - name: Build BetterTLS JSON run: | diff --git a/.github/workflows/refresh-online-testcases.yml b/.github/workflows/refresh-online-testcases.yml index 6bf08319..7a01d8c9 100644 --- a/.github/workflows/refresh-online-testcases.yml +++ b/.github/workflows/refresh-online-testcases.yml @@ -15,6 +15,8 @@ jobs: steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-python@v5 with: diff --git a/.github/workflows/regression.yml b/.github/workflows/regression.yml index b2b15851..dba5aa27 100644 --- a/.github/workflows/regression.yml +++ b/.github/workflows/regression.yml @@ -13,6 +13,8 @@ jobs: steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-python@v5 with: diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml index c869caf3..beb1f838 100644 --- a/.github/workflows/site.yml +++ b/.github/workflows/site.yml @@ -24,6 +24,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - uses: actions/setup-python@v5 with: