From f330b9be889a017503108f27099123d251032ee3 Mon Sep 17 00:00:00 2001 From: miroslavpojer Date: Fri, 8 Nov 2024 14:34:29 +0100 Subject: [PATCH] #65 - Do Not Persist Credentials - Workflows - Disabled saving of credential in all checkout actions. --- .github/workflows/release_draft.yml | 2 ++ .github/workflows/static_analysis_and_tests.yml | 5 +++++ 2 files changed, 7 insertions(+) diff --git a/.github/workflows/release_draft.yml b/.github/workflows/release_draft.yml index ec5e60e..cfbf54c 100644 --- a/.github/workflows/release_draft.yml +++ b/.github/workflows/release_draft.yml @@ -29,6 +29,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - name: Validate format of received tag uses: actions/github-script@v7 @@ -85,6 +86,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - uses: actions/setup-python@v5.1.1 with: diff --git a/.github/workflows/static_analysis_and_tests.yml b/.github/workflows/static_analysis_and_tests.yml index ffdab2e..dd311d9 100644 --- a/.github/workflows/static_analysis_and_tests.yml +++ b/.github/workflows/static_analysis_and_tests.yml @@ -12,6 +12,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4.1.5 + with: + persist-credentials: false - name: Set up Python uses: actions/setup-python@v5.1.0 @@ -44,6 +46,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4.1.5 + with: + persist-credentials: false - name: Set up Python uses: actions/setup-python@v5.1.0 @@ -68,6 +72,7 @@ jobs: uses: actions/checkout@v4.1.5 with: fetch-depth: 0 + persist-credentials: false - name: Set up Python uses: actions/setup-python@v5.1.0