fix(ci): harden GitHub Actions workflows against expression injection (#10200)

2026-07-24 13:01:56 +00:00 · 2026-03-01 19:58:43 +01:00
parent 80e84d1da4
commit 8be218b29f
40 changed files with 364 additions and 122 deletions
@@ -29,6 +29,8 @@ jobs:
    steps:
      - name: Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false

      - name: Check if Dockerfile changed
        id: dockerfile-changed
@@ -64,6 +66,8 @@ jobs:
    steps:
      - name: Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false

      - name: Check for API changes
        id: check-changes