fix(ci): harden GitHub Actions workflows against expression injection (#10200)

2026-10-09 21:14:22 +00:00 · 2026-03-01 19:58:43 +01:00
parent 80e84d1da4
commit 8be218b29f
40 changed files with 364 additions and 122 deletions
@@ -26,6 +26,7 @@ jobs:
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          fetch-depth: 0
+          persist-credentials: false

      - name: Scan for secrets with TruffleHog
        uses: trufflesecurity/trufflehog@ef6e76c3c4023279497fab4721ffa071a722fd05 # v3.92.4