From 0e53029d8709ee560161684a84ad90427c77ee00 Mon Sep 17 00:00:00 2001 From: Silje Enge Kristensen Date: Wed, 12 Jun 2024 15:06:31 +0200 Subject: [PATCH] ci: set persist-credentials to false for checkout action --- .github/workflows/node.yaml | 14 +++++++++++--- .github/workflows/publish.yaml | 9 +++++++-- 2 files changed, 18 insertions(+), 5 deletions(-) diff --git a/.github/workflows/node.yaml b/.github/workflows/node.yaml index 9545262d..45f938b0 100644 --- a/.github/workflows/node.yaml +++ b/.github/workflows/node.yaml @@ -16,7 +16,10 @@ jobs: timeout-minutes: 15 steps: - - uses: actions/checkout@v4 + - name: Git checkout + uses: actions/checkout@v4 + with: + persist-credentials: false - name: Use Node.js 18.x uses: actions/setup-node@v4 with: @@ -44,7 +47,10 @@ jobs: node-version: [14.x, 16.x, 18.x, 20.x, 22.x] steps: - - uses: actions/checkout@v4 + - name: Git checkout + uses: actions/checkout@v4 + with: + persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: @@ -84,8 +90,10 @@ jobs: # - validate-dependencies steps: - - uses: actions/checkout@v4 + - name: Git checkout + uses: actions/checkout@v4 with: + persist-credentials: false fetch-depth: 0 - name: Use Node.js 18.x uses: actions/setup-node@v4 diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 677b2a7b..6f6bc700 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -16,7 +16,10 @@ jobs: node-version: [14.x, 16.x, 18.x, 20.x, 22.x] steps: - - uses: actions/checkout@v4 + - name: Git checkout + uses: actions/checkout@v4 + with: + persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: @@ -41,8 +44,10 @@ jobs: - test steps: - - uses: actions/checkout@v4 + - name: Git checkout + uses: actions/checkout@v4 with: + persist-credentials: false fetch-depth: 0 - name: Use Node.js 18.x uses: actions/setup-node@v4