From 03202ad3cfc4c8ebef2b5ba4cdb5df0d37f05f35 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pawe=C5=82=20Wroniszewski?= Date: Fri, 25 Oct 2024 12:03:04 +0200 Subject: [PATCH] CI: disable persist-credentials for actions/checkout It is a possible security issue. We do not want to persist credentials in the repo and thus exposing those to further steps. References: actions/checkout#485 (comment) azat/chdig#67 --- .github/workflows/ci-tests.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml index 21d506ae8..d9dc30f3c 100644 --- a/.github/workflows/ci-tests.yml +++ b/.github/workflows/ci-tests.yml @@ -10,6 +10,7 @@ jobs: - uses: actions/checkout@v4 with: submodules: true + persist-credentials: false - uses: actions/cache@v4 with: