From 208dc69db1ce982c4786659f28a4a53cf9cc5913 Mon Sep 17 00:00:00 2001 From: Daniel McCarney Date: Fri, 6 Dec 2024 15:47:03 -0500 Subject: [PATCH] ci: disable persist-credentials in rust.yml We already do this in most of the other Rustls crates, and Zizmor 0.7.0 flags[0] its absence in this repo. [0]: https://woodruffw.github.io/zizmor/audits/#artipacked --- .github/workflows/rust.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index 7361f3d..7fa71d8 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -7,6 +7,8 @@ jobs: runs-on: windows-latest steps: - uses: actions/checkout@v2 + with: + persist-credentials: false - run: ci/set_rust_version.bash ${{ matrix.channel }} ${{ matrix.target }} shell: bash - run: ci/test.bash cargo ${{ matrix.target }}