Skip to content

Commit 426f7db

Browse files
CI: disable persist-credentials for actions/checkout
It is a possible security issue. We do not want to persist credentials in the repo and thus exposing those to further steps. References: actions/checkout#485 (comment) azat/chdig#67
1 parent 29895a1 commit 426f7db

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

.github/workflows/ci.yml

+2
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,8 @@ jobs:
2525
steps:
2626
- name: Checkout
2727
uses: actions/checkout@v3
28+
with:
29+
persist-credentials: false
2830

2931
- name: Set up QEMU
3032
uses: docker/setup-qemu-action@v2

0 commit comments

Comments
 (0)