From ceda790b5383f32c0e9596ac12172fa3cf317d7f Mon Sep 17 00:00:00 2001 From: Shunsuke Suzuki Date: Wed, 25 Dec 2024 11:39:03 +0900 Subject: [PATCH] ci: disable actions/checkout's persist-credentials using disable-checkout-persist-credentials (#533) https://github.com/suzuki-shunsuke/batch-bulk-disable-checkout-persist-credentials/issues/1 --- .github/workflows/deploy.yaml | 2 ++ .github/workflows/test.yaml | 4 ++++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml index 9f266d35..d5efcbab 100644 --- a/.github/workflows/deploy.yaml +++ b/.github/workflows/deploy.yaml @@ -14,6 +14,8 @@ jobs: contents: write # For peaceiris/actions-gh-pages steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 with: node-version-file: .nvmrc diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 7c39b05b..c8b05ab8 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -98,6 +98,8 @@ jobs: permissions: {} steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0 with: aqua_version: v2.40.0 @@ -113,6 +115,8 @@ jobs: permissions: {} steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0 with: aqua_version: v2.40.0