Don't persist git credentials after checkout in CI workflows

This commit is contained in:
Denis Kasak
2026-07-14 16:31:25 +02:00
parent 5fb744a59f
commit f301669882
12 changed files with 83 additions and 1 deletions
@@ -39,16 +39,19 @@ jobs:
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
if: github.event_name == 'workflow_dispatch'
with:
persist-credentials: false
ref: ${{ inputs.branch }}
- name: Checkout clean copy of develop (scheduled build)
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
if: github.event_name == 'schedule'
with:
persist-credentials: false
ref: develop
- name: Checkout clean copy of master (on-push)
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
if: github.event_name == 'push'
with:
persist-credentials: false
ref: master
# We use `poetry` in `complement.sh`
- uses: matrix-org/setup-python-poetry@5bbf6603c5c930615ec8a29f1b5d7d258d905aa4 # v2.0.0