Merge pull request #1107 from Homebrew/fix-zizmor-findings

workflows: fix artipacked zizmor findings
Homebrew · Dec 15, 2024 · ff1a39f · ff1a39f
2 parents 2165f73 + eb0e407
commit ff1a39f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -12,6 +12,8 @@ jobs:
     steps:
       - name: Set up Git repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
 
       - name: Install Ruby
         uses: ruby/setup-ruby@401c19e14f474b54450cd3905bb8b86e2c8509cf # v1.204.0
@@ -26,6 +28,8 @@ jobs:
     steps:
       - name: Set up Git repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
 
       - name: Set up Homebrew
         id: set-up-homebrew
@@ -42,6 +46,8 @@ jobs:
     steps:
       - name: Set up Git repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
 
       - name: Check release notes redirect
         run: ruby ./.github/actions/check-redirects.rb