ci: disable persisted git credentials for improved security

reactjs · Sep 2, 2023 · 237425c · 237425c
1 parent cd2116d
commit 237425c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/rubocop.yml b/.github/workflows/rubocop.yml
@@ -13,6 +13,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}

diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
@@ -67,6 +67,8 @@ jobs:
       MT_KWARGS_HACK: 1
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - uses: actions/setup-node@v3
     - run: npm -g install yalc
     - run: yalc publish