Merge pull request #28 from traveltime-dev/github-actions-checkout-se…

…curity-fix CI: disable persist-credentials for actions/checkout
traveltime-dev · Oct 25, 2024 · 43c0ce0 · 43c0ce0
2 parents 4a90b3f + 2efed4d
commit 43c0ce0
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -18,6 +18,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: Set up Ruby 2.7
         uses: ruby/setup-ruby@v1
@@ -41,6 +43,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -11,6 +11,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: Set up Ruby 2.7
         uses: ruby/setup-ruby@v1