ci: don't persist credentials in actions/checkout (#1422)

2025-11-03 06:29:07 -05:00
parent bafa15c8f1
commit 9e9e6c9d55
8 changed files with 41 additions and 6 deletions
--- a/.github/workflows/check_security_vulnerability.yml
+++ b/.github/workflows/check_security_vulnerability.yml
@@ -25,6 +25,8 @@ jobs:
    steps:
      - name: Checkout code
        uses: actions/checkout@v5.0.0
+        with:
+          persist-credentials: false

      - name: Run DevSkim scanner
        uses: microsoft/DevSkim-Action@4b5047945a44163b94642a1cecc0d93a3f428cc6 # v1.0.16