Skip to content

chore: avoid persisting checkout credentials - #151

Merged
Mark Woolley (marknet15) merged 1 commit into
mainfrom
fix/checkout-credentials
Aug 3, 2026
Merged

chore: avoid persisting checkout credentials#151
Mark Woolley (marknet15) merged 1 commit into
mainfrom
fix/checkout-credentials

Conversation

@marknet15

@marknet15 Mark Woolley (marknet15) commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

Changes

  • Disable credential persistence on the release checkout.
  • Authenticate tag pushes explicitly with the short-lived GitHub App token.
  • Remove the unused token-bearing remote.

Tests

  • actionlint
  • Security scan of the changed workflow

@marknet15
Mark Woolley (marknet15) marked this pull request as ready for review July 31, 2026 14:20
@marknet15 Mark Woolley (marknet15) changed the title fix: avoid persisting checkout credentials chore: avoid persisting checkout credentials Aug 3, 2026
@marknet15
Mark Woolley (marknet15) added this pull request to the merge queue Aug 3, 2026
Merged via the queue into main with commit e581ec3 Aug 3, 2026
6 checks passed
@marknet15
Mark Woolley (marknet15) deleted the fix/checkout-credentials branch August 3, 2026 08:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AlexisColes Alexis Coles (AlexisColes) AlexisColes approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@marknet15 @AlexisColes