Skip to content

Commit 3d1d8a4

Browse files
committed
Improve GithubActions security
1 parent 50d3eb6 commit 3d1d8a4

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

.github/workflows/ci.yml

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
---
22
name: CI
33

4+
permissions: {}
5+
46
on:
57
push:
68
branches:
@@ -19,7 +21,9 @@ jobs:
1921

2022
steps:
2123
- name: Checkout
22-
uses: actions/checkout@v5
24+
uses: actions/checkout@v6
25+
with:
26+
persist-credentials: false
2327

2428
- name: Setup Ruby
2529
uses: ruby/setup-ruby@v1
@@ -67,7 +71,9 @@ jobs:
6771

6872
steps:
6973
- name: Checkout
70-
uses: actions/checkout@v5
74+
uses: actions/checkout@v6
75+
with:
76+
persist-credentials: false
7177

7278
- name: Setup Ruby
7379
uses: ruby/setup-ruby@v1

0 commit comments

Comments
 (0)