From b1a6ea31e2977245eedf409cc0b86b8b44e8908d Mon Sep 17 00:00:00 2001 From: miroslavpojer Date: Fri, 8 Nov 2024 14:58:35 +0100 Subject: [PATCH] #20 - Do Not Persist Credentials - Workflows (#21) - Disabled saving of credential in all checkout actions. --- .github/workflows/integration_tests.yml | 1 + .github/workflows/release_draft.yml | 2 ++ .github/workflows/unit_tests.yml | 2 ++ 3 files changed, 5 insertions(+) diff --git a/.github/workflows/integration_tests.yml b/.github/workflows/integration_tests.yml index 1dc0f39..307e123 100644 --- a/.github/workflows/integration_tests.yml +++ b/.github/workflows/integration_tests.yml @@ -30,6 +30,7 @@ jobs: - uses: actions/checkout@v4.1.7 with: fetch-depth: 0 + persist-credentials: false - name: Test 1 - default id: test_1 diff --git a/.github/workflows/release_draft.yml b/.github/workflows/release_draft.yml index 72bee14..9066978 100644 --- a/.github/workflows/release_draft.yml +++ b/.github/workflows/release_draft.yml @@ -30,6 +30,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - name: Validate format of received tag uses: actions/github-script@v7 @@ -88,6 +89,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - uses: actions/setup-python@v5.1.1 with: diff --git a/.github/workflows/unit_tests.yml b/.github/workflows/unit_tests.yml index 794ca4e..6d6900f 100644 --- a/.github/workflows/unit_tests.yml +++ b/.github/workflows/unit_tests.yml @@ -28,6 +28,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4.1.5 + with: + persist-credentials: false - name: Set up Python uses: actions/setup-python@v5.1.0 with: