Merge pull request #381 from jorenham/dont-presist-credentials

Author: jorenham

.github/workflows/ci.yml

@@ -20,6 +20,8 @@ jobs:
     timeout-minutes: 2
     steps:
       - uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
       - uses: astral-sh/setup-uv@v8.0.0
       - name: ruff check
         run: uv run ruff check --output-format=github
@@ -31,6 +33,8 @@ jobs:
     timeout-minutes: 2
     steps:
       - uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
       - name: dprint
         uses: dprint/check@v2.3
 
@@ -39,6 +43,8 @@ jobs:
     timeout-minutes: 2
     steps:
       - uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
       - uses: astral-sh/setup-uv@v8.0.0
         with:
           python-version: "3.12"
@@ -54,6 +60,8 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
       - uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
       - uses: astral-sh/setup-uv@v8.0.0
         with:
           python-version: "3.12"
@@ -67,6 +75,8 @@ jobs:
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
       - uses: astral-sh/setup-uv@v8.0.0
         with:
           python-version: "3.12"

.github/workflows/collect.yml

@@ -26,12 +26,15 @@ jobs:
     steps:
       - name: checkout main
         uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
 
       - name: checkout data
         uses: actions/checkout@v6.0.2
         with:
           ref: data
           path: _data
+          persist-credentials: false
 
       - uses: astral-sh/setup-uv@v8.0.0
         with:

.github/workflows/docs.yml

@@ -40,12 +40,15 @@ jobs:
     steps:
       - name: checkout main
         uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
 
       - name: checkout data
         uses: actions/checkout@v6.0.2
         with:
           ref: data
           path: _data
+          persist-credentials: false
 
       - uses: actions/configure-pages@v6
 

.github/workflows/publish-pypi.yml

@@ -21,8 +21,12 @@ jobs:
       id-token: write
     steps:
       - uses: actions/checkout@v6.0.2
+        with:
+          persist-credentials: false
 
       - uses: astral-sh/setup-uv@v8.0.0
+        with:
+          enable-cache: false
 
       - name: uv build
         run: uv build