Skip to content

Commit 2e39657

Browse files
[FSSDK-12315] Arnica risk fixes (#600)
* [FSSDK-12315] Add persist-credentials: false to all actions/checkout steps Prevent git credentials from being persisted in .git/config during GitHub Actions workflows, reducing the risk of accidental credential exposure through artifacts. * [FSSDK-12315] Remove unused source_clear_cron workflow
1 parent f496660 commit 2e39657

File tree

4 files changed

+8
-17
lines changed

4 files changed

+8
-17
lines changed

.github/workflows/build.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ jobs:
2323
runs-on: ubuntu-latest
2424
steps:
2525
- uses: actions/checkout@v4
26+
with:
27+
persist-credentials: false
2628
- name: set up JDK 8
2729
uses: actions/setup-java@v2
2830
with:

.github/workflows/integration_test.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,7 @@ jobs:
2020
repository: 'optimizely/ci-helper-tools'
2121
path: 'home/runner/ci-helper-tools'
2222
ref: 'master'
23+
persist-credentials: false
2324
- name: set SDK Branch if PR
2425
env:
2526
HEAD_REF: ${{ github.head_ref }}

.github/workflows/java.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,8 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- uses: actions/checkout@v4
21+
with:
22+
persist-credentials: false
2123
- name: Set up Ruby
2224
uses: ruby/setup-ruby@v1
2325
with:
@@ -55,7 +57,9 @@ jobs:
5557
steps:
5658
- name: checkout
5759
uses: actions/checkout@v4
58-
60+
with:
61+
persist-credentials: false
62+
5963
- name: set up JDK ${{ matrix.jdk }}
6064
uses: actions/setup-java@v4
6165
with:

.github/workflows/source_clear_cron.yml

Lines changed: 0 additions & 16 deletions
This file was deleted.

0 commit comments

Comments
 (0)