David Barragán Merino fa3e01f7c7 👷 Disable checkout credential persistence ...

Set persist-credentials: false on every actions/checkout step, so the
job token is not left in .git/config for the rest of the job. No step
after checkout pushes or fetches with it. The only authenticated operation,
gh release in release.yml, uses GH_TOKEN.

Signed-off-by: David Barragán Merino <david.barragan@kaleidos.net>

2026-09-30 17:01:58 +02:00

..

ISSUE_TEMPLATE

🔧 Fix default issue templates

2026-06-10 12:36:21 +02:00

scripts

🐛 Make integration test summary non-fatal on staging

2026-09-15 18:55:11 +02:00

workflows

👷 Disable checkout credential persistence

2026-09-30 17:01:58 +02:00

actionlint.yaml

👷 Add actionlint and zizmor checks for workflows

2026-09-30 10:31:02 +02:00

config.yml

📝 GitHub issue templates and bots config

2019-08-12 12:55:28 +02:00

dependabot.yml

👷 Pin GitHub Actions to commit SHAs

2026-09-30 15:29:28 +02:00

PULL_REQUEST_TEMPLATE.md

📚 Remove the requirement of changelog update

2026-06-08 12:02:28 +02:00

stale.yml

📝 GitHub issue templates and bots config

2019-08-12 12:55:28 +02:00

zizmor.yml

👷 Disable checkout credential persistence

2026-09-30 17:01:58 +02:00