Resolve zizmor warnings

bunkerlab-net · Feb 7, 2025 · 72700b8 · 72700b8
1 parent af7f9a5
commit 72700b8
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -11,6 +11,8 @@ on:
     branches:
       - master
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ${{ matrix.runs-on }}
@@ -24,7 +26,11 @@ jobs:
             runs-on: blacksmith-8vcpu-ubuntu-2204-arm
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: docker/setup-buildx-action@v3
+        with:
+          cache-binary: false
       - name: Build
         uses: docker/build-push-action@v6
         with:
@@ -46,12 +52,16 @@ jobs:
     steps:
       - run: lscpu
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ github.token }}
       - uses: docker/setup-buildx-action@v3
+        with:
+          cache-binary: false
       - uses: docker/metadata-action@v5
         id: meta
         with: