Fix some issues pointed out by zizmor. (#644)

ansible-community · Dec 14, 2024 · d12b3fd · d12b3fd
1 parent def8c24
commit d12b3fd
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/antsibull-build.yml b/.github/workflows/antsibull-build.yml
@@ -63,41 +63,47 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: antsibull-build
+          persist-credentials: false
 
       - name: Check out dependent project antsibull-changelog
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-changelog
           path: antsibull-changelog
           ref: ${{ matrix.antsibull_changelog_ref }}
+          persist-credentials: false
 
       - name: Check out dependent project antsibull-core
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-core
           path: antsibull-core
           ref: ${{ matrix.antsibull_core_ref }}
+          persist-credentials: false
 
       - name: Check out dependent project antsibull-docs-parser
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-docs-parser
           path: antsibull-docs-parser
           ref: ${{ matrix.antsibull_docs_parser_ref }}
+          persist-credentials: false
 
       - name: Check out dependent project antsibull-docutils
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-docutils
           path: antsibull-docutils
           ref: ${{ matrix.antsibull_docutils_ref }}
+          persist-credentials: false
 
       - name: Check out dependent project antsibull-fileutils
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-fileutils
           path: antsibull-fileutils
           ref: ${{ matrix.antsibull_fileutils_ref }}
+          persist-credentials: false
 
       - name: Set up Python ${{ matrix.python }}
         uses: actions/setup-python@v5

diff --git a/.github/workflows/nox.yml b/.github/workflows/nox.yml
@@ -59,31 +59,37 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: antsibull-build
+          persist-credentials: false
       - name: Check out dependent project antsibull-core
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-core
           path: antsibull-core
+          persist-credentials: false
       - name: Check out dependent project antsibull-changelog
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-changelog
           path: antsibull-changelog
+          persist-credentials: false
       - name: Check out dependent project antsibull-docs-parser
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-docs-parser
           path: antsibull-docs-parser
+          persist-credentials: false
       - name: Check out dependent project antsibull-docutils
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-docutils
           path: antsibull-docutils
+          persist-credentials: false
       - name: Check out dependent project antsibull-fileutils
         uses: actions/checkout@v4
         with:
           repository: ansible-community/antsibull-fileutils
           path: antsibull-fileutils
+          persist-credentials: false
       - name: Install extra packages
         if: "matrix.packages != ''"
         run: |