diff options
| author | Theo Buehler <tb@openbsd.org> | 2026-08-14 14:50:12 +0200 |
|---|---|---|
| committer | Theo Buehler <tb@openbsd.org> | 2026-08-14 15:47:51 +0200 |
| commit | e07df6da53a0ae5c07383546b7219577a68610cd (patch) | |
| tree | b9cae26a2cb4a63192927c1032fe30752409d899 /.github/scripts | |
| parent | 0e1a7af560f468066d08f95760306ccfed3c4bd9 (diff) | |
| download | portable-e07df6da53a0ae5c07383546b7219577a68610cd.tar.gz portable-e07df6da53a0ae5c07383546b7219577a68610cd.tar.bz2 portable-e07df6da53a0ae5c07383546b7219577a68610cd.zip | |
zizmor: set persist-credentials
per zizmor, actions/checkout should be followed by removal of credentials that
may have been saved to disk. Doing so fixes lots of whining such as:
```
warning[artipacked]: credential persistence through GitHub Actions artifacts
--> ./.github/workflows/android.yml:27:9
|
27 | - name: "Checkout repository"
| _________^
28 | | uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
| |________________________________________________________________________________^ does not set persist-credentials: false
|
= note: audit confidence → Low
= note: this finding has an auto-fix
```
Diffstat (limited to '.github/scripts')
0 files changed, 0 insertions, 0 deletions