CI: use "persist-credentials: false" for actions/checkout

See https://woodruffw.github.io/zizmor/audits/#artipacked
This commit is contained in:
Christoph Reiter 2024-12-06 14:58:44 +01:00
parent cf1e9b4c20
commit 58f6dc63ea

View File

@ -15,6 +15,8 @@ jobs:
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
persist-credentials: false
- name: setup-msys2
uses: msys2/setup-msys2@v2
@ -72,6 +74,8 @@ jobs:
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
persist-credentials: false
- uses: actions/download-artifact@v4
with:
@ -108,6 +112,8 @@ jobs:
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
persist-credentials: false
- uses: actions/download-artifact@v4
with:
@ -141,6 +147,8 @@ jobs:
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
persist-credentials: false
- uses: actions/download-artifact@v4
with: