Skip to content

Commit cd399ab

Browse files
committed
ci: use persist-credentials: false throughout
We already do this in most of the other Rustls crates, and Zizmor 0.7.0 flags[0] its absence in this repo. [0]: https://woodruffw.github.io/zizmor/audits/#artipacked
1 parent 93dbdf0 commit cd399ab

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

.github/workflows/CI.yml

+8
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,8 @@ jobs:
1919
steps:
2020
- name: Checkout sources
2121
uses: actions/checkout@v3
22+
with:
23+
persist-credentials: false
2224

2325
- name: Install stable toolchain
2426
uses: dtolnay/rust-toolchain@stable
@@ -39,6 +41,8 @@ jobs:
3941
steps:
4042
- name: Checkout sources
4143
uses: actions/checkout@v3
44+
with:
45+
persist-credentials: false
4246

4347
- name: Install rust toolchain
4448
uses: dtolnay/rust-toolchain@master
@@ -65,6 +69,8 @@ jobs:
6569
steps:
6670
- name: Checkout sources
6771
uses: actions/checkout@v3
72+
with:
73+
persist-credentials: false
6874

6975
- name: Install stable toolchain
7076
uses: dtolnay/rust-toolchain@stable
@@ -84,6 +90,8 @@ jobs:
8490
steps:
8591
- name: Checkout sources
8692
uses: actions/checkout@v3
93+
with:
94+
persist-credentials: false
8795

8896
- uses: dtolnay/rust-toolchain@master
8997
with:

0 commit comments

Comments
 (0)