Skip to content

Commit

Permalink
CI: disable persist-credentials for actions/checkout
Browse files Browse the repository at this point in the history
It is a possible security issue.
We do not want to persist credentials in the repo and thus exposing those
to further steps.

References:

actions/checkout#485 (comment)
azat/chdig#67
  • Loading branch information
pawel-wroniszewski committed Oct 25, 2024
1 parent 29895a1 commit 426f7db
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,8 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@v3
with:
persist-credentials: false

- name: Set up QEMU
uses: docker/setup-qemu-action@v2
Expand Down

0 comments on commit 426f7db

Please sign in to comment.