Skip to content

Commit 7df1210

Browse files
authored
[TASK] Do not persist GitHub credentials on CI (#1630)
https://docs.zizmor.sh/audits/#artipacked Part of #1628
1 parent f96c67b commit 7df1210

2 files changed

Lines changed: 8 additions & 0 deletions

File tree

.github/workflows/ci.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,8 @@ jobs:
2121
steps:
2222
- name: Checkout
2323
uses: actions/checkout@v7
24+
with:
25+
persist-credentials: false
2426

2527
- name: Install PHP
2628
uses: shivammathur/setup-php@v2
@@ -64,6 +66,8 @@ jobs:
6466
steps:
6567
- name: Checkout
6668
uses: actions/checkout@v7
69+
with:
70+
persist-credentials: false
6771

6872
- name: Install PHP
6973
uses: shivammathur/setup-php@v2
@@ -114,6 +118,8 @@ jobs:
114118
steps:
115119
- name: Checkout
116120
uses: actions/checkout@v7
121+
with:
122+
persist-credentials: false
117123

118124
- name: Install PHP
119125
uses: shivammathur/setup-php@v2

.github/workflows/codecoverage.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ jobs:
2323
steps:
2424
- name: Checkout
2525
uses: actions/checkout@v7
26+
with:
27+
persist-credentials: false
2628

2729
- name: Install PHP
2830
uses: shivammathur/setup-php@v2

0 commit comments

Comments
 (0)