fix(ci): harden GitHub Actions workflows against expression injection (#10200)

2026-07-04 19:21:51 +00:00 · 2026-03-01 19:58:43 +01:00
parent 80e84d1da4
commit 8be218b29f
40 changed files with 364 additions and 122 deletions
@@ -43,6 +43,8 @@ jobs:
    steps:
      - name: Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false

      - name: Initialize CodeQL
        uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9