From f8c92f042891a734e9da230f49152af73408fbc6 Mon Sep 17 00:00:00 2001
From: paulfantom <pawel@krupa.net.pl>
Date: Tue, 2 Mar 2021 13:57:37 +0100
Subject: [PATCH] .github: do not persist credentials on checkout
---
.github/workflows/ci.yaml | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index a98a9ed9..8f95eb96 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,6 +16,8 @@ jobs:
name: Generate
steps:
- uses: actions/checkout@v2
+ with:
+ persist-credentials: false
- uses: actions/setup-go@v2
with:
go-version: ${{ env.golang-version }}
@@ -25,18 +27,24 @@ jobs:
name: Jsonnet linter
steps:
- uses: actions/checkout@v2
+ with:
+ persist-credentials: false
- run: make --always-make lint
fmt:
runs-on: ubuntu-latest
name: Jsonnet formatter
steps:
- uses: actions/checkout@v2
+ with:
+ persist-credentials: false
- run: make --always-make fmt && git diff --exit-code
unit-tests:
runs-on: ubuntu-latest
name: Unit tests
steps:
- uses: actions/checkout@v2
+ with:
+ persist-credentials: false
- run: make --always-make test
e2e-tests:
name: E2E tests
@@ -48,6 +56,8 @@ jobs:
- 'kindest/node:v1.20.0'
steps:
- uses: actions/checkout@v2
+ with:
+ persist-credentials: false
- name: Start KinD
uses: engineerd/setup-kind@v0.5.0
with:
--
GitLab