ci(workflows): disable `actions/checkout` credential persistance (#44) #92

	# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
	# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

	name: Testing Dex

	on:
	push:
	branches:
	- main
	pull_request:

	# No GITHUB_TOKEN permissions, as we only use it to increase API limit.
	permissions: {}

	jobs:
	lint:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v5
	with:
	persist-credentials: false

	- name: Setup Node.js environment
	uses: actions/setup-node@v4
	with:
	node-version-file: ".nvmrc"
	cache: yarn
	cache-dependency-path: \|
	yarn.lock
	libs/*/.js

	- name: Install all yarn packages (ROOT)
	run: yarn --frozen-lockfile
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Lint prettier
	run: yarn prettier-check

	- name: Lint ESLint
	run: yarn eslint

	- name: Check TypeScript
	run: yarn check:tsc

	test:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v5
	with:
	persist-credentials: false

	- name: Setup Node.js environment
	uses: actions/setup-node@v4
	with:
	node-version-file: ".nvmrc"
	cache: yarn

	- name: Install all yarn packages
	run: yarn --frozen-lockfile
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Unit testing libs
	run: yarn test:libs

Provide feedback