ci: don't persist credentials in actions/checkout (#1422)

2025-11-03 06:29:07 -05:00
parent bafa15c8f1
commit 9e9e6c9d55
8 changed files with 41 additions and 6 deletions
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -18,5 +18,8 @@ jobs:
    steps:
      - name: 'Checkout Repository'
        uses: actions/checkout@v5.0.0
+        with:
+          persist-credentials: false
+
      - name: 'Dependency Review'
        uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1