Skip to content

Commit fab6c89

Browse files
morganchen12morganchen12
committed
run zizmor fix
1 parent 94454c0 commit fab6c89

12 files changed

Lines changed: 42 additions & 0 deletions

‎.github/workflows/android.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,7 @@ jobs:
3030
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
3131
with:
3232
submodules: false
33+
persist-credentials: false
3334
- name: Use expanded matrix
3435
if: github.event.inputs.use_expanded_matrix == '1'
3536
run: |
@@ -94,6 +95,7 @@ jobs:
9495
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
9596
with:
9697
submodules: true
98+
persist-credentials: false
9799

98100
- name: Set env variables for subsequent steps (all)
99101
shell: bash

‎.github/workflows/build-report.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@ jobs:
3232
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
3333
with:
3434
fetch-depth: 0
35+
persist-credentials: false
3536
- name: Install Desktop SDK prerequisites
3637
uses: nick-invision/retry@14672906e672a08bd6eeb15720e9ed3ce869cdd4 # ratchet:nick-invision/retry@v2
3738
with:

‎.github/workflows/checks.yml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ jobs:
2424
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
2525
with:
2626
submodules: false
27+
persist-credentials: false
2728
- name: Setup python
2829
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
2930
with:
@@ -59,6 +60,7 @@ jobs:
5960
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
6061
with:
6162
submodules: false
63+
persist-credentials: false
6264
- name: Setup python
6365
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
6466
with:
@@ -98,6 +100,7 @@ jobs:
98100
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
99101
with:
100102
submodules: false
103+
persist-credentials: false
101104
- name: Run check_copyright.sh
102105
run: |
103106
set -e
@@ -113,6 +116,7 @@ jobs:
113116
with:
114117
fetch-depth: 0
115118
submodules: false
119+
persist-credentials: false
116120
- name: Check whether release notes have been updated
117121
# Skip this if the PR has the skipReleaseNotes label or if it's a merge to other than main.
118122
if: ${{!contains(github.event.pull_request.labels.*.name, env.skipReleaseNotesLabel) && (github.event.pull_request.base.ref == 'main')}}

‎.github/workflows/checks_secure.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,7 @@ jobs:
2929
if: steps.check.outputs.has-permission != 1 || github.event.pull_request.head.repo.full_name != github.repository
3030
with:
3131
submodules: false
32+
persist-credentials: false
3233
- name: Setup python
3334
if: steps.check.outputs.has-permission != 1 || github.event.pull_request.head.repo.full_name != github.repository
3435
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4

‎.github/workflows/cpp-packaging.yml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -144,6 +144,7 @@ jobs:
144144
repository: llvm/llvm-project
145145
path: llvm-src
146146
ref: ${{ env.llvmVer }}
147+
persist-credentials: false
147148

148149
- name: Build LLVM (Mac only)
149150
# Only build LLVM if we don't already have binaries from the cache.
@@ -166,6 +167,7 @@ jobs:
166167
repository: nico/demumble
167168
path: demumble-src
168169
ref: ${{ env.demumbleVer }}
170+
persist-credentials: false
169171

170172
- name: build demumble
171173
run: |
@@ -212,6 +214,7 @@ jobs:
212214
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
213215
with:
214216
path: sdk-src
217+
persist-credentials: false
215218

216219
- name: Setup python
217220
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
@@ -267,6 +270,7 @@ jobs:
267270
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
268271
with:
269272
path: sdk-src
273+
persist-credentials: false
270274

271275
- name: Store git credentials for all git commands
272276
# Forces all git commands to use authenticated https, to prevent throttling.
@@ -381,6 +385,7 @@ jobs:
381385
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
382386
with:
383387
submodules: true
388+
persist-credentials: false
384389

385390
- name: Set env variables for subsequent steps (all)
386391
shell: bash
@@ -524,6 +529,7 @@ jobs:
524529
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
525530
with:
526531
path: sdk-src
532+
persist-credentials: false
527533

528534
- name: download packaging-tool artifacts
529535
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
@@ -732,6 +738,7 @@ jobs:
732738
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
733739
with:
734740
path: sdk-src
741+
persist-credentials: false
735742

736743
- name: download artifact
737744
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
@@ -857,6 +864,8 @@ jobs:
857864
steps:
858865
- name: Checkout repo
859866
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
867+
with:
868+
persist-credentials: false
860869

861870
- name: Setup python
862871
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
@@ -930,6 +939,8 @@ jobs:
930939
steps:
931940
- name: Checkout repo
932941
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
942+
with:
943+
persist-credentials: false
933944
- name: Setup python
934945
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
935946
with:

‎.github/workflows/desktop.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@ jobs:
3232
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
3333
with:
3434
submodules: false
35+
persist-credentials: false
3536
- name: Use expanded matrix
3637
if: github.event.inputs.expanded_matrix == '1'
3738
run: |
@@ -118,6 +119,7 @@ jobs:
118119
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
119120
with:
120121
submodules: true
122+
persist-credentials: false
121123

122124
- name: Set env vars (ubuntu)
123125
if: startsWith(matrix.os, 'ubuntu')
@@ -329,6 +331,7 @@ jobs:
329331
with:
330332
ref: ${{needs.check_and_prepare.outputs.github_ref}}
331333
submodules: true
334+
persist-credentials: false
332335
- name: Cache vcpkg C++ dependencies
333336
id: cache_vcpkg
334337
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # ratchet:actions/cache@v3

‎.github/workflows/integration_tests.yml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -153,6 +153,7 @@ jobs:
153153
ref: ${{steps.set_outputs.outputs.github_ref}}
154154
fetch-depth: 0
155155
submodules: false
156+
persist-credentials: false
156157
- name: Setup python
157158
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
158159
with:
@@ -303,6 +304,7 @@ jobs:
303304
with:
304305
ref: ${{needs.check_and_prepare.outputs.github_ref}}
305306
submodules: true
307+
persist-credentials: false
306308
- name: Setup python
307309
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
308310
with:
@@ -473,6 +475,7 @@ jobs:
473475
with:
474476
ref: ${{needs.check_and_prepare.outputs.github_ref}}
475477
submodules: true
478+
persist-credentials: false
476479
- run: df -h
477480
- name: Free Disk Space (Ubuntu)
478481
if: runner.os == 'Linux'
@@ -614,6 +617,7 @@ jobs:
614617
with:
615618
ref: ${{needs.check_and_prepare.outputs.github_ref}}
616619
submodules: true
620+
persist-credentials: false
617621
- name: Setup python
618622
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
619623
with:
@@ -733,6 +737,7 @@ jobs:
733737
with:
734738
ref: ${{needs.check_and_prepare.outputs.github_ref}}
735739
submodules: true
740+
persist-credentials: false
736741
- name: Setup python
737742
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
738743
with:
@@ -869,6 +874,7 @@ jobs:
869874
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
870875
with:
871876
ref: ${{needs.check_and_prepare.outputs.github_ref}}
877+
persist-credentials: false
872878
- name: Download Desktop integration tests artifact
873879
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
874880
with:
@@ -996,6 +1002,7 @@ jobs:
9961002
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
9971003
with:
9981004
ref: ${{needs.check_and_prepare.outputs.github_ref}}
1005+
persist-credentials: false
9991006
- name: Download Android integration tests artifact
10001007
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
10011008
with:
@@ -1138,6 +1145,7 @@ jobs:
11381145
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
11391146
with:
11401147
ref: ${{needs.check_and_prepare.outputs.github_ref}}
1148+
persist-credentials: false
11411149
- name: Download iOS integration tests artifact
11421150
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
11431151
with:
@@ -1320,6 +1328,7 @@ jobs:
13201328
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
13211329
with:
13221330
ref: ${{needs.check_and_prepare.outputs.github_ref}}
1331+
persist-credentials: false
13231332
- name: Download tvOS integration tests artifact
13241333
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
13251334
with:
@@ -1465,6 +1474,7 @@ jobs:
14651474
with:
14661475

14671476
ref: ${{needs.check_and_prepare.outputs.github_ref}}
1477+
persist-credentials: false
14681478
- name: Setup python
14691479
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
14701480
with:
@@ -1542,6 +1552,7 @@ jobs:
15421552
with:
15431553

15441554
ref: ${{needs.check_and_prepare.outputs.github_ref}}
1555+
persist-credentials: false
15451556
- name: Setup python
15461557
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
15471558
with:

‎.github/workflows/ios.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@ jobs:
2626
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
2727
with:
2828
submodules: false
29+
persist-credentials: false
2930
- name: Use expanded matrix
3031
if: github.event.inputs.use_expanded_matrix == '1'
3132
run: |
@@ -61,6 +62,7 @@ jobs:
6162
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
6263
with:
6364
submodules: true
65+
persist-credentials: false
6466

6567
- name: Setup python
6668
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4

‎.github/workflows/lint.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,10 +17,12 @@ jobs:
1717
repository: cpplint/cpplint
1818
ref: "1.5.5"
1919
path: cpplint
20+
persist-credentials: false
2021
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
2122
with:
2223
submodules: false
2324
path: firebase
25+
persist-credentials: false
2426

2527
- name: Setup python
2628
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4

‎.github/workflows/retry-test-failures.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,7 @@ jobs:
2929
ref: ${{ matrix.branch_name }}
3030
fetch-depth: 0
3131
submodules: false
32+
persist-credentials: false
3233

3334
- name: Install prerequisites
3435
run: |

0 commit comments

Comments
 (0)