Tell actions/checkout not to persist credentials

Recommended by `zizmor`. See https://docs.zizmor.sh/audits/#artipacked for an explanation.
2026-06-06 13:22:30 +00:00 · 2026-05-05 12:34:57 +01:00
parent b99023662a
commit fdf8dde38a
10 changed files with 50 additions and 0 deletions
@@ -26,6 +26,8 @@ jobs:
    steps:
      - name: Checkout the code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable