From 47c7093e80f9e7ed0700a62e6e5be753615e6c7f Mon Sep 17 00:00:00 2001 From: MatteoH2O1999 Date: Thu, 16 Jan 2025 23:26:06 +0100 Subject: [PATCH] Audit action --- .github/workflows/integration.yml | 2 ++ .github/workflows/release.yml | 7 ++++++- .github/workflows/test.yml | 6 ++++++ 3 files changed, 14 insertions(+), 1 deletion(-) diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index 6a389d1..eb83882 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -16,6 +16,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Setup node uses: actions/setup-node@v4 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 27c9e67..c25f520 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,6 +17,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Setup node ${{ matrix.node-version }} uses: actions/setup-node@v4 with: @@ -33,6 +35,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Setup node uses: actions/setup-node@v4 with: @@ -52,11 +56,12 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Setup node uses: actions/setup-node@v4 with: node-version: '20.x' - cache: 'npm' registry-url: https://registry.npmjs.org/ - name: Install dependencies run: npm ci diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index af2e150..bf8f051 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -26,6 +26,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Setup node ${{ matrix.node-version }} uses: actions/setup-node@v4 with: @@ -42,6 +44,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Setup node uses: actions/setup-node@v4 with: @@ -60,6 +64,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Remove internal test repo run: rm -rf test_repo - name: Initialize CodeQL