Skip to content

Commit f8ba893

Browse files
authored
Disable credential persistence in GitHub Actions checkout steps (#631)
Add persist-credentials: false to all actions/checkout steps across CI workflows to prevent credentials from being exposed to subsequent workflow steps, improving security posture.
1 parent 806712e commit f8ba893

File tree

3 files changed

+6
-0
lines changed

3 files changed

+6
-0
lines changed

.github/workflows/check-license.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,8 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
18+
with:
19+
persist-credentials: false
1820

1921
- uses: apache/skywalking-eyes/header@0630b017b4e34f27f0d8719c873d703fb31ec8de
2022
with:

.github/workflows/ci.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,8 @@ jobs:
2121
steps:
2222
- name: Checkout Repository
2323
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
24+
with:
25+
persist-credentials: false
2426

2527
- name: Set up JDK 17
2628
uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e

.github/workflows/update-gradle-wrapper.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,8 @@ jobs:
2020

2121
steps:
2222
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
23+
with:
24+
persist-credentials: false
2325

2426
- name: Update Gradle Wrapper
2527
uses: gradle-update/update-gradle-wrapper-action@512b1875f3b6270828abfe77b247d5895a2da1e5

0 commit comments

Comments
 (0)