ci: fix composite action (checkout must precede local action ref)

Author: Onibenjo

.github/actions/setup-taskfile/action.yml

@@ -1,18 +1,8 @@
 name: Setup Taskfile
-description: Checkout repo and install Taskfile
-inputs:
-  fetch-depth:
-    description: git fetch depth (default 1)
-    required: false
-    default: "1"
+description: Install Taskfile at the pinned version
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@v4
-      with:
-        fetch-depth: ${{ inputs.fetch-depth }}
-        persist-credentials: false
-
     - uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0
       with:
         version: 3.40.0

.github/workflows/pr-with-task.yaml

@@ -32,6 +32,9 @@ jobs:
     name: "Start Project"
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-taskfile
 
       - name: Start server
@@ -62,36 +65,54 @@ jobs:
     name: "Build Project"
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-taskfile
       - run: task build
 
   lint-scss:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-taskfile
       - run: task lint-scss
 
   lint-js:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-taskfile
       - run: task lint-js
 
   lint-ts:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-taskfile
       - run: task lint-ts
 
   lint-python:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-taskfile
       - run: task lint-python
 
   check-prettier:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-taskfile
       - run: task check-prettier
 
@@ -131,9 +152,11 @@ jobs:
       MARKETO_API_CLIENT: ${{ secrets.MARKETO_API_CLIENT }}
       MARKETO_API_SECRET: ${{ secrets.MARKETO_API_SECRET }}
     steps:
-      - uses: ./.github/actions/setup-taskfile
+      - uses: actions/checkout@v4
         with:
-          fetch-depth: "0"
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: ./.github/actions/setup-taskfile
 
       - name: Run Python tests
         run: task test-python
@@ -148,9 +171,11 @@ jobs:
   test-js:
     runs-on: ubuntu-latest
     steps:
-      - uses: ./.github/actions/setup-taskfile
+      - uses: actions/checkout@v4
         with:
-          fetch-depth: "0"
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: ./.github/actions/setup-taskfile
 
       - name: Run JS tests
         run: task test-js