mirror of
https://github.com/curl/curl.git
synced 2026-06-01 22:54:17 +03:00
GHA: set persist-credentials: false
Suggested by zizmor GHA analysis tool. Also: - Move GH variables within single-quotes. - Prefer single-quotes in shell code. (tidy-up) Ref: https://github.com/actions/checkout/issues/485 Ref: https://github.com/actions/checkout/pull/1687 Ref: https://woodruffw.github.io/zizmor/ Closes #15746
This commit is contained in:
parent
9991f255dd
commit
ba9fe58d43
13 changed files with 72 additions and 5 deletions
2
.github/workflows/linux.yml
vendored
2
.github/workflows/linux.yml
vendored
|
|
@ -320,6 +320,8 @@ jobs:
|
|||
name: 'install dependencies'
|
||||
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: 'Fix kernel mmap rnd bits'
|
||||
# Asan in llvm 14 provided in ubuntu 22.04 is incompatible with
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue