diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-07-02 21:28:50 +0300 |
|---|---|---|
| committer | Yuriy Andamasov <yuriy@vyos.io> | 2026-07-02 21:28:50 +0300 |
| commit | 8d34ba3d61e0e2ea608866f0738060967447fc2e (patch) | |
| tree | 5d536d7cdcf682ff60edcdce8ae4c96697282901 /.github/workflows | |
| parent | 0d61bd73fca982d35dbadb3e81472d29a5a9a090 (diff) | |
| download | vyconf-8d34ba3d61e0e2ea608866f0738060967447fc2e.tar.gz vyconf-8d34ba3d61e0e2ea608866f0738060967447fc2e.zip | |
T9044: disable credential persistence on CI checkout
Build-only job; set persist-credentials: false so the git token is not
left in .git/config for later steps (per zizmor / CodeRabbit).
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to '.github/workflows')
| -rw-r--r-- | .github/workflows/build.yml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 4173811..8a8537a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -32,6 +32,10 @@ jobs: steps: - name: Checkout uses: actions/checkout@v4 + with: + # Build-only job; do not leave the git token in .git/config for + # later steps (e.g. the git-pinned vyos1x-config install). + persist-credentials: false - name: Set up OCaml ${{ matrix.ocaml-compiler }} uses: ocaml/setup-ocaml@v3 |