set persist-credentials of workflow to false #796

	# Simple workflow for deploying static content to GitHub Pages
	name: Demo website

	on:
	# Runs on pushes targeting the default branch
	push:
	branches: ["main"]

	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
	permissions:
	contents: read
	pages: write
	id-token: write

	# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
	# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
	concurrency:
	group: "pages"
	cancel-in-progress: false

	jobs:
	# Single deploy job since we're just deploying
	deploy:
	environment:
	name: github-pages
	url: ${{ steps.deployment.outputs.page_url }}
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	persist-credentials: false
	fetch-depth: 0
	fetch-tags: true

	- name: Typos
	uses: crate-ci/[email protected]

	- name: Install clojure tools
	uses: DeLaGuardo/[email protected]
	with:
	cli: 1.12.0.1488
	clj-kondo: 2024.11.14

	- name: Lint
	run: npm run lint

	- name: Install packages
	run: npm ci

	- name: Test
	run: npm run test

	- name: Build
	run: npm run build

	- name: Setup Pages
	uses: actions/configure-pages@v5

	- name: Upload artifact
	uses: actions/upload-pages-artifact@v3
	with:
	# Upload entire repository
	path: './resources/public'

	- name: Deploy to GitHub Pages
	id: deployment
	uses: actions/deploy-pages@v4

Provide feedback