set persist-credentials of workflow to false

repath-project · Dec 12, 2024 · e1c40ac · e1c40ac
1 parent f6d1d03
commit e1c40ac
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 2 deletions.
diff --git a/.github/workflows/clj-holmes.yml b/.github/workflows/clj-holmes.yml
@@ -27,6 +27,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Scan code
         uses: clj-holmes/clj-holmes-action@53daa4da4ff495cccf791e4ba4222a8317ddae9e

diff --git a/.github/workflows/demo.yml b/.github/workflows/demo.yml
@@ -32,6 +32,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
         with:
+          persist-credentials: false
           fetch-depth: 0
           fetch-tags: true
 

diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
@@ -11,6 +11,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: liquidz/antq-action@main
         with:
           excludes: 'org.clojure/tools.deps.alpha lambdaisland/deep-diff2'
diff --git a/.github/workflows/sponsors.yml b/.github/workflows/sponsors.yml
@@ -11,13 +11,15 @@ jobs:
     steps:
       - name: Checkout 🛎️
         uses: actions/checkout@v4
-
+        with:
+          persist-credentials: false
+
       - name: Generate Sponsors 💖
         uses: JamesIves/github-sponsors-readme-action@v1
         with:
           token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
           file: 'README.md'
-      
+
       - name: Deploy to GitHub Pages 🚀
         uses: JamesIves/github-pages-deploy-action@v4
         with:

diff --git a/.github/workflows/studio.yml b/.github/workflows/studio.yml
@@ -20,6 +20,7 @@ jobs:
       - name: Check out Git repository
         uses: actions/checkout@v4
         with:
+          persist-credentials: false
           fetch-depth: 0
           fetch-tags: true