From 3fb98a47bcddf5fe712daad2aec3a8aed1633ae0 Mon Sep 17 00:00:00 2001
From: Felix Fontein <felix@fontein.de>
Date: Sat, 14 Dec 2024 14:55:52 +0100
Subject: [PATCH] Fix some issues pointed out by zizmor. (#84)

---
 .github/workflows/ansible-test.yml | 3 +++
 .github/workflows/extra-tests.yml  | 1 +
 .github/workflows/reuse.yml        | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/.github/workflows/ansible-test.yml b/.github/workflows/ansible-test.yml
index 257a33a..bed6d79 100644
--- a/.github/workflows/ansible-test.yml
+++ b/.github/workflows/ansible-test.yml
@@ -135,6 +135,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: ansible_collections/felixfontein/acme
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -171,6 +172,8 @@ jobs:
     steps:
       - name: Check out code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
diff --git a/.github/workflows/extra-tests.yml b/.github/workflows/extra-tests.yml
index d364a39..777bd74 100644
--- a/.github/workflows/extra-tests.yml
+++ b/.github/workflows/extra-tests.yml
@@ -28,6 +28,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: ansible_collections/${{env.NAMESPACE}}/${{env.COLLECTION_NAME}}
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index 6e03a84..3493ad7 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -22,6 +22,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v5