From 1301d51ff7c6d6fa90c6bdd16faf61d6d2c4179d Mon Sep 17 00:00:00 2001 From: Pierre Jeanjacquot <26487010+PierreJeanjacquot@users.noreply.github.com> Date: Mon, 5 Oct 2026 11:56:56 +0200 Subject: [PATCH] fix: checkout with persist-credentials: false --- .github/workflows/docker-build-cloud.yml | 2 ++ .github/workflows/docker-build.yml | 2 ++ .github/workflows/docker-promote.yml | 1 + .github/workflows/java-build.yml | 1 + .github/workflows/propose-safe-multisig-tx.yml | 1 + .github/workflows/publish-npm.yml | 2 ++ .github/workflows/rust-build.yml | 2 ++ docker-build-cloud/workflow-sha256 | 2 +- docker-build/workflow-sha256 | 2 +- docker-promote/workflow-sha256 | 2 +- java-build/workflow-sha256 | 2 +- propose-safe-multisig-tx/workflow-sha256 | 2 +- publish-npm/workflow-sha256 | 2 +- rust-build/workflow-sha256 | 2 +- 14 files changed, 18 insertions(+), 7 deletions(-) diff --git a/.github/workflows/docker-build-cloud.yml b/.github/workflows/docker-build-cloud.yml index a14d8e2..a015299 100644 --- a/.github/workflows/docker-build-cloud.yml +++ b/.github/workflows/docker-build-cloud.yml @@ -51,6 +51,8 @@ jobs: steps: - name: Checkout Repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false # Login MUST run before Set up Docker Buildx so the cloud driver can # authenticate to the Docker Build Cloud endpoint via ~/.docker/config.json. diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 141a1ad..44e0a37 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -118,6 +118,8 @@ jobs: - name: Checkout Repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Download build artifact if: ${{ inputs.artifact-name != '' }} diff --git a/.github/workflows/docker-promote.yml b/.github/workflows/docker-promote.yml index 39bcae6..2412eff 100644 --- a/.github/workflows/docker-promote.yml +++ b/.github/workflows/docker-promote.yml @@ -63,6 +63,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + persist-credentials: false - name: Check the tag and the project version agree id: check diff --git a/.github/workflows/java-build.yml b/.github/workflows/java-build.yml index c48b590..7ac31c4 100644 --- a/.github/workflows/java-build.yml +++ b/.github/workflows/java-build.yml @@ -72,6 +72,7 @@ jobs: # Sonar needs the full history to attribute lines to authors, and the Gradle # build derives the project version from the tag pointing at HEAD. fetch-depth: 0 + persist-credentials: false - name: Set up JDK uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 diff --git a/.github/workflows/propose-safe-multisig-tx.yml b/.github/workflows/propose-safe-multisig-tx.yml index 97159b8..f8fb592 100644 --- a/.github/workflows/propose-safe-multisig-tx.yml +++ b/.github/workflows/propose-safe-multisig-tx.yml @@ -53,6 +53,7 @@ jobs: - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: + persist-credentials: false repository: iExecBlockchainComputing/github-actions-workflows - name: Setup Node.js diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml index b228b55..44ae026 100644 --- a/.github/workflows/publish-npm.yml +++ b/.github/workflows/publish-npm.yml @@ -101,6 +101,8 @@ jobs: path: ${{ inputs.artifact-path }} - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: diff --git a/.github/workflows/rust-build.yml b/.github/workflows/rust-build.yml index 3170846..259db8f 100644 --- a/.github/workflows/rust-build.yml +++ b/.github/workflows/rust-build.yml @@ -33,6 +33,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Install Rust toolchain uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # @master 2026-09-12 (action has no version tags) diff --git a/docker-build-cloud/workflow-sha256 b/docker-build-cloud/workflow-sha256 index 2135527..d94e4b6 100644 --- a/docker-build-cloud/workflow-sha256 +++ b/docker-build-cloud/workflow-sha256 @@ -1 +1 @@ -43e170deab62e55ddba84fe208e8a0370f7ea1f3fd1cd8447c66836b7f926cbd +988d890cdfffa6499cf4793ee140f9ff19467560c60acdf133b505122fc76bde diff --git a/docker-build/workflow-sha256 b/docker-build/workflow-sha256 index 80147d5..dd143ec 100644 --- a/docker-build/workflow-sha256 +++ b/docker-build/workflow-sha256 @@ -1 +1 @@ -25895c20dacd914da70625a96d8be611b257dffdce92c349a561461988d1e29f +eda9395589dd24e9b931f836a515d6733a82df11438abc850ae0220d9c49fc9e diff --git a/docker-promote/workflow-sha256 b/docker-promote/workflow-sha256 index 3c47217..6bca625 100644 --- a/docker-promote/workflow-sha256 +++ b/docker-promote/workflow-sha256 @@ -1 +1 @@ -bae0d1c5a9f086031b7e33d60555788f3827e68ff87cbb68ba89b9c2f5e9482c +cce84d081be3cd55c0c579a07ec148b9e859dac04192b282dccd9ca2aeb14af5 diff --git a/java-build/workflow-sha256 b/java-build/workflow-sha256 index 05e353f..f6605dc 100644 --- a/java-build/workflow-sha256 +++ b/java-build/workflow-sha256 @@ -1 +1 @@ -7613d95bab42ba3dee3574df0bf3e43059b96720aedb0f5560d3f4b7e92e2aed +b489f04732126520d4ed0ff1f3153c5d92b016cdc52658476a40b996517c0006 diff --git a/propose-safe-multisig-tx/workflow-sha256 b/propose-safe-multisig-tx/workflow-sha256 index fd8c078..500f827 100644 --- a/propose-safe-multisig-tx/workflow-sha256 +++ b/propose-safe-multisig-tx/workflow-sha256 @@ -1 +1 @@ -fd5f2c5b52e9fba44a86fe2b8f0b5e38fe04bf464ca4ac8a65f3d850f53a9426 +e4cfab6457a672097572fcd054d6db1109871779c33ce1e7649cb8265527a948 diff --git a/publish-npm/workflow-sha256 b/publish-npm/workflow-sha256 index fc7348a..60c2bc9 100644 --- a/publish-npm/workflow-sha256 +++ b/publish-npm/workflow-sha256 @@ -1 +1 @@ -07eaef487e580e8c16e82a532f0b271b645bb733c1c3fc37899dedfab9936c13 +a0f982d67bdbbede205a42f52391604ce973c8c2b83598c2f4a12b8673bcc4ba diff --git a/rust-build/workflow-sha256 b/rust-build/workflow-sha256 index 0ae4a92..074a5fe 100644 --- a/rust-build/workflow-sha256 +++ b/rust-build/workflow-sha256 @@ -1 +1 @@ -64dfabf72bbdfb5babe8ace19240ef5f799531950a4de7962f615837fe2176a5 +d7dda2c72a42adb7818175d14d51fafbe7c2d53ec73119bbacd14ebfab36db60