ci: remove git credentials after checkout (#118)

Fdawgs · May 19, 2022 · 65dedb2 · 65dedb2
1 parent 7c3cab1
commit 65dedb2
Show file tree

Hide file tree

Showing 4 changed files with 15 additions and 0 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -30,6 +30,8 @@ jobs:
             - name: Check out repo
               if: steps.release.outputs.release_created
               uses: actions/checkout@v3
+              with:
+                  persist-credentials: false
 
             - name: Setup Node
               if: steps.release.outputs.release_created

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -36,6 +36,8 @@ jobs:
         steps:
             - name: Check out repo
               uses: actions/checkout@v3
+              with:
+                  persist-credentials: false
 
             - name: Dependency review
               uses: actions/dependency-review-action@v1
@@ -47,6 +49,8 @@ jobs:
         steps:
             - name: Check out repo
               uses: actions/checkout@v3
+              with:
+                  persist-credentials: false
 
             - name: Setup Node
               uses: actions/setup-node@v3
@@ -76,6 +80,7 @@ jobs:
               uses: actions/checkout@v3
               with:
                   fetch-depth: 0
+                  persist-credentials: false
 
             - name: Run Commitlint
               uses: wagoid/commitlint-github-action@v4
@@ -93,6 +98,8 @@ jobs:
         steps:
             - name: Check out repo
               uses: actions/checkout@v3
+              with:
+                  persist-credentials: false
 
             - name: Setup Node ${{ matrix.node-version }}
               uses: actions/setup-node@v3
@@ -139,6 +146,8 @@ jobs:
         steps:
             - name: Check out repo
               uses: actions/checkout@v3
+              with:
+                  persist-credentials: false
 
             - name: Save PR number
               run: |

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -31,6 +31,8 @@ jobs:
         steps:
             - name: Check out repo
               uses: actions/checkout@v3
+              with:
+                  persist-credentials: false
 
             # Initialises the CodeQL tools for scanning
             - name: Initialise CodeQL

diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml
@@ -42,6 +42,8 @@ jobs:
         steps:
             - name: Check out repo
               uses: actions/checkout@v3
+              with:
+                  persist-credentials: false
 
             - name: Run Linkinator
               uses: JustinBeckwith/linkinator-action@v1