From e49ba13ba6e4a66d59d26f77653e5ac2a7e7e929 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Tue, 12 Nov 2024 16:14:39 -0700 Subject: [PATCH] workflows: zizmor fixes Signed-off-by: William Woodruff --- .github/workflows/docs.yml | 2 ++ .github/workflows/lint.yml | 2 ++ .github/workflows/release.yml | 2 ++ .github/workflows/tests.yml | 2 ++ 4 files changed, 8 insertions(+) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 16b561a..59be228 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -10,6 +10,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + with: + persist-credentials: false - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5 with: diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index bc29338..dac8661 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -11,6 +11,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + with: + persist-credentials: false - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1b27a3d..6b445eb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,6 +13,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + with: + persist-credentials: false - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5 with: diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 2033392..e011cb7 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -21,6 +21,8 @@ jobs: id-token: write # unit tests use the ambient OIDC credential steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + with: + persist-credentials: false - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5 with: