mirror of
https://github.com/systemd/systemd.git
synced 2026-08-12 22:17:19 +00:00
d2e2a0566f
Set `persist-credentials: false` for actions/checkout.
By default, using `actions/checkout` causes a credential to be persisted on
disk. Subsequent steps may accidentally publicly persist the credential, e.g.
by including it in a publicly accessible artifact via actions/upload-artifact.
However, even without this, persisting the credential on disk is non-ideal
unless actually needed.
Link: https://docs.zizmor.sh/audits/#artipacked
(cherry picked from commit 6461eccacb)