Skip to content

Commit 9d9bf06

Browse files
committed
Don't persist credentials after using actions/checkout
See: https://docs.zizmor.sh/audits/#artipacked
1 parent 61b9b8f commit 9d9bf06

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

.github/workflows/test-javascript.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,8 @@ jobs:
3333
- name: set git core.autocrlf to 'input'
3434
run: git config --global core.autocrlf input
3535
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
36+
with:
37+
persist-credentials: false
3638
- name: with Node.js ${{ matrix.node-version }} on ${{ matrix.os }}
3739
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
3840
with:

0 commit comments

Comments
 (0)