Dmitry V. Levin 6461eccacb github/workflows: disable persisting credentials for actions/checkout ...

Set `persist-credentials: false` for actions/checkout.

By default, using `actions/checkout` causes a credential to be persisted on
disk.  Subsequent steps may accidentally publicly persist the credential, e.g.
by including it in a publicly accessible artifact via actions/upload-artifact.
However, even without this, persisting the credential on disk is non-ideal
unless actually needed.

Link: https://docs.zizmor.sh/audits/#artipacked

2026-02-18 08:00:00 +00:00

..

build-test-musl.sh

musl: split out script to setup build

2025-11-17 17:02:23 +01:00

build-test.sh

ci: Add coverage for -Dcompat-mutable-uid-boundaries=true

2026-01-02 09:39:32 +01:00

build-test.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

cflite-pr.yml

workflows: Use hyphens in filenames instead of underscores

2025-07-13 12:41:12 +02:00

cifuzz.yml

build(deps): bump the actions group across 1 directory with 9 updates

2026-01-28 16:27:11 +09:00

codeql.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

coverage.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

coverity.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

development-freeze.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

differential-shellcheck.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

gather-pr-metadata.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

issue-labeler.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

labeler.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

linter.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

make-release.yml

build(deps): bump softprops/action-gh-release from 2.4.1 to 2.5.0

2025-12-01 13:25:11 +00:00

mkosi.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

requirements.txt

build(deps): bump meson from 1.10.0 to 1.10.1 in /.github/workflows

2026-01-28 15:25:50 +09:00

scorecards.yml

build(deps): bump the actions group across 1 directory with 9 updates

2026-01-28 16:27:11 +09:00

unit-tests-musl.sh

tree-wide: Use meson test -q

2025-12-12 11:45:58 +01:00

unit-tests-musl.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00

unit-tests.sh

tree-wide: Use meson test -q

2025-12-12 11:45:58 +01:00

unit-tests.yml

github/workflows: disable persisting credentials for actions/checkout

2026-02-18 08:00:00 +00:00