SEC: avoid leaking credentials in GHA (#2769)

2026-03-11 19:50:11 +05:30
parent 02c132e91e
commit eaf116e303
4 changed files with 20 additions and 0 deletions
@@ -31,6 +31,8 @@ jobs:
        private-key: ${{ secrets.CIBUILDWHEEL_BOT_APP_PRIVATE_KEY }}

    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false

    - uses: wntrblm/nox@2026.02.09