From e7386f76a3e8141082d9e4812b8561479238338e Mon Sep 17 00:00:00 2001 From: "patchback[bot]" <45432694+patchback[bot]@users.noreply.github.com> Date: Sat, 14 Dec 2024 15:17:12 +0100 Subject: [PATCH] [PR #9250/f6dae1fc backport][stable-8] CI: Fix some issues pointed out by zizmor (#9251) CI: Fix some issues pointed out by zizmor (#9250) Fix some issues pointed out by zizmor. (cherry picked from commit f6dae1fc4d2edbb44871045e573c781d0911fa06) Co-authored-by: Felix Fontein --- .github/workflows/codeql-analysis.yml | 2 ++ .github/workflows/reuse.yml | 1 + 2 files changed, 3 insertions(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index c93162a72a3..e8572fafb6f 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -25,6 +25,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4 + with: + persist-credentials: false # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml index 7c6f76bd5b1..3c5e986e570 100644 --- a/.github/workflows/reuse.yml +++ b/.github/workflows/reuse.yml @@ -28,6 +28,7 @@ jobs: steps: - uses: actions/checkout@v4 with: + persist-credentials: false ref: ${{ github.event.pull_request.head.sha || '' }} - name: REUSE Compliance Check