From b668b55efd458b8903c6c4554e48aea621ceee63 Mon Sep 17 00:00:00 2001 From: arnasbr Date: Fri, 25 Oct 2024 13:33:40 +0300 Subject: [PATCH] security fix --- .github/workflows/deploy_to_repo.yaml | 4 +++- .github/workflows/tests.yml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy_to_repo.yaml b/.github/workflows/deploy_to_repo.yaml index b579132..4483f38 100644 --- a/.github/workflows/deploy_to_repo.yaml +++ b/.github/workflows/deploy_to_repo.yaml @@ -9,7 +9,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 + with: + persist-credentials: false - name: Setup python uses: actions/setup-python@v1 diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 0d0e041..622ed87 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -26,7 +26,9 @@ jobs: steps: - name: Check out repository code - uses: actions/checkout@v3 + uses: actions/checkout@v4 + with: + persist-credentials: false - name: Copy .env run: cp .env.example .env