Merge pull request #34 from Homebrew/zizmor-fixes

workflows/build: fix zizmor findings
Homebrew · Nov 25, 2024 · 16fd16f · 16fd16f
2 parents c4cc960 + 1d837a7
commit 16fd16f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -26,6 +26,8 @@ jobs:
           - container: debian7
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Build Docker image
         run: docker build --tag ${{matrix.container}} .

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -21,6 +21,8 @@ jobs:
       TAG: ${{github.event.inputs.tag}}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Download binaries from GitHub Actions
         uses: actions/download-artifact@v4