Improve github actions with zizmor

rhoriguchi · Dec 13, 2024 · 7aa620c · 7aa620c
1 parent fc9c6f5
commit 7aa620c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml
@@ -14,6 +14,8 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: cachix/install-nix-action@v30
       - id: set-matrix
         name: Generate Nix Matrix
@@ -28,5 +30,7 @@ jobs:
       matrix: ${{fromJSON(needs.nix-matrix.outputs.matrix)}}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: cachix/install-nix-action@v30
       - run: nix build -L ".#${{ matrix.attr }}"