ci: disable persisted git credentials for improved security

shakacode · Sep 2, 2023 · 8bbfd90 · 8bbfd90
1 parent c5d227b
commit 8bbfd90
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/lint-js-and-ruby.yml b/.github/workflows/lint-js-and-ruby.yml
@@ -11,6 +11,8 @@ jobs:
  runs-on: ubuntu-22.04
  steps:
  - uses: actions/checkout@v3
+ with:
+ persist-credentials: false
  - name: Setup Ruby
  uses: ruby/setup-ruby@v1
  with:

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -11,6 +11,8 @@ jobs:
  runs-on: ubuntu-22.04
  steps:
  - uses: actions/checkout@v3
+ with:
+ persist-credentials: false
  - name: Setup Ruby
  uses: ruby/setup-ruby@v1
  with:
@@ -83,6 +85,8 @@ jobs:
  runs-on: ubuntu-22.04
  steps:
  - uses: actions/checkout@v3
+ with:
+ persist-credentials: false
  - name: Setup Ruby
  uses: ruby/setup-ruby@v1
  with:

diff --git a/.github/workflows/package-js-tests.yml b/.github/workflows/package-js-tests.yml
@@ -10,6 +10,8 @@ jobs:
  runs-on: ubuntu-22.04
  steps:
  - uses: actions/checkout@v3
+ with:
+ persist-credentials: false
  - name: Setup Node
  uses: actions/setup-node@v3
  with:

diff --git a/.github/workflows/rspec-package-specs.yml b/.github/workflows/rspec-package-specs.yml
@@ -11,6 +11,8 @@ jobs:
  runs-on: ubuntu-22.04
  steps:
  - uses: actions/checkout@v3
+ with:
+ persist-credentials: false
  - name: Setup Ruby
  uses: ruby/setup-ruby@v1
  with: