ci: disable-checkout-persist-credentials (#30315)

* ci: disable-checkout-persist-credentials * style: remove a newline
aquaproj · Dec 25, 2024 · b483654 · b483654
1 parent 7ca52d3
commit b483654
Show file tree

Hide file tree

Showing 12 changed files with 23 additions and 1 deletion.
diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml
@@ -19,6 +19,8 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
           aqua_version: v2.40.0

diff --git a/.github/workflows/count-pkgs.yaml b/.github/workflows/count-pkgs.yaml
@@ -12,6 +12,8 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: asdf-vm/actions/setup@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 # v3.0.2
       - uses: jdx/mise-action@249c01ba271e19fa76eede7f766161cc95ace489 # v2.1.10
       - run: |

diff --git a/.github/workflows/debug-with-action-tmate.yaml b/.github/workflows/debug-with-action-tmate.yaml
@@ -20,6 +20,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{inputs.ref}}
+          persist-credentials: false
 
       - run: gh pr checkout "${{inputs.pr_number}}"
         if: inputs.pr_number != ''

diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
@@ -18,6 +18,8 @@ jobs:
       packages: write
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
           aqua_version: v2.40.0

diff --git a/.github/workflows/wc-check-files.yaml b/.github/workflows/wc-check-files.yaml
@@ -9,4 +9,6 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/registry-action/check-files@7b6e2c92250ab08b58f5c665f6e2ca4712bee2c3 # v0.2.1
diff --git a/.github/workflows/wc-ci-info.yaml b/.github/workflows/wc-ci-info.yaml
@@ -12,6 +12,8 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
           aqua_version: v2.40.0

diff --git a/.github/workflows/wc-generate-registry.yaml b/.github/workflows/wc-generate-registry.yaml
@@ -9,6 +9,8 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
           aqua_version: v2.40.0

diff --git a/.github/workflows/wc-json-schema.yaml b/.github/workflows/wc-json-schema.yaml
@@ -9,4 +9,6 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/registry-action/validate-json-schema@7b6e2c92250ab08b58f5c665f6e2ca4712bee2c3 # v0.2.1
diff --git a/.github/workflows/wc-lintnet.yaml b/.github/workflows/wc-lintnet.yaml
@@ -13,6 +13,8 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
           aqua_version: v2.40.0

diff --git a/.github/workflows/wc-prettier.yaml b/.github/workflows/wc-prettier.yaml
@@ -9,5 +9,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - run: npm i -g prettier
       - run: prettier -c .
diff --git a/.github/workflows/wc-test-docker.yaml b/.github/workflows/wc-test-docker.yaml
@@ -9,6 +9,8 @@ jobs:
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
           aqua_version: v2.40.0

diff --git a/.github/workflows/wc-test.yaml b/.github/workflows/wc-test.yaml
@@ -38,6 +38,8 @@ jobs:
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - uses: suzuki-shunsuke/ci-info-action/restore@ceeb10dd50cd632db31e7eccf92cbbb6856f3191 # v0.1.3
 
       # - name: Generate token
@@ -46,7 +48,6 @@ jobs:
       #   with:
       #     app_id: ${{ secrets.APP_ID }}
       #     private_key: ${{ secrets.APP_PRIVATE_KEY }}
-
       - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
           aqua_version: v2.40.0