Audit action

MatteoH2O1999 · Jan 16, 2025 · 47c7093 · 47c7093
1 parent d1010f9
commit 47c7093
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 1 deletion.
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -16,6 +16,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup node
         uses: actions/setup-node@v4
         with:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -17,6 +17,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup node ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
@@ -33,6 +35,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup node
         uses: actions/setup-node@v4
         with:
@@ -52,11 +56,12 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup node
         uses: actions/setup-node@v4
         with:
           node-version: '20.x'
-          cache: 'npm'
           registry-url: https://registry.npmjs.org/
       - name: Install dependencies
         run: npm ci

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -26,6 +26,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup node ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
@@ -42,6 +44,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup node
         uses: actions/setup-node@v4
         with:
@@ -60,6 +64,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Remove internal test repo
         run: rm -rf test_repo
       - name: Initialize CodeQL