mirror of
https://github.com/curl/curl.git
synced 2026-05-16 15:06:21 +03:00
GHA: set persist-credentials: false
Suggested by zizmor GHA analysis tool. Also: - Move GH variables within single-quotes. - Prefer single-quotes in shell code. (tidy-up) Ref: https://github.com/actions/checkout/issues/485 Ref: https://github.com/actions/checkout/pull/1687 Ref: https://woodruffw.github.io/zizmor/ Closes #15746
This commit is contained in:
parent
9991f255dd
commit
ba9fe58d43
13 changed files with 72 additions and 5 deletions
2
.github/workflows/codeql-analysis.yml
vendored
2
.github/workflows/codeql-analysis.yml
vendored
|
|
@ -48,6 +48,8 @@ jobs:
|
|||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
# Initializes the CodeQL tools for scanning.
|
||||
- name: Initialize CodeQL
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue