nandi.uk / gleam
Fork of daniellemaywood.uk/gleam — Wasm codegen work
2
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

Disable credential persistence in checkout actions

Add persist-credentials: false to all actions/checkout uses to
prevent git credentials from being stored on disk where they
could accidentally be included in artifacts.

See: https://docs.zizmor.sh/audits/#artipacked

author
Jonatan Männchen committer
Louis Pilfold date (Apr 6, 2026, 3:47 PM +0100) commit 2485a7f4 parent b26596f6
+20
+12
.github/workflows/ci.yaml
··· 80 80 steps: 81 81 - name: Checkout repository 82 82 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 83 + with: 84 + persist-credentials: false 83 85 84 86 - name: Install musl-tools incl. musl-gcc 85 87 uses: awalsh128/cache-apt-pkgs-action@2c09a5e66da6c8016428a2172bd76e5e4f14bb17 # v1.5.3 ··· 319 321 steps: 320 322 - name: Checkout repository 321 323 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 324 + with: 325 + persist-credentials: false 322 326 323 327 - name: Install Rust toolchain 324 328 uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable ··· 344 348 steps: 345 349 - name: Checkout repository 346 350 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 351 + with: 352 + persist-credentials: false 347 353 348 354 - name: Install Rust toolchain 349 355 uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable ··· 360 366 steps: 361 367 - name: Checkout repository 362 368 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 369 + with: 370 + persist-credentials: false 363 371 364 372 - name: Ensure no merge commits 365 373 uses: NexusPHP/no-merge-commits@4f0fa727cc774b7b0d459b4d2372c3fc14f242d7 # v2.4.0 ··· 389 397 steps: 390 398 - name: Checkout repository 391 399 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 400 + with: 401 + persist-credentials: false 392 402 393 403 - name: Install Rust toolchain 394 404 uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable ··· 420 430 steps: 421 431 - name: Checkout repository 422 432 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 433 + with: 434 + persist-credentials: false 423 435 424 436 - name: Install Deno 425 437 uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4
+1
.github/workflows/release-containers.yaml
··· 36 36 sparse-checkout: | 37 37 .github/actions 38 38 containers 39 + persist-credentials: false 39 40 40 41 - name: "Build & Push Container" 41 42 uses: "./.github/actions/build-container"
+5
.github/workflows/release-nightly.yaml
··· 28 28 # if: ${{ github.repository == 'gleam-lang/gleam' }} 29 29 steps: 30 30 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 31 + with: 32 + persist-credentials: false 31 33 - name: print latest_commit 32 34 run: echo ${{ github.sha }} 33 35 ··· 100 102 steps: 101 103 - name: Checkout repository 102 104 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 105 + with: 106 + persist-credentials: false 103 107 104 108 - name: Update versions 105 109 shell: bash ··· 161 165 sparse-checkout: | 162 166 .github/actions 163 167 containers 168 + persist-credentials: false 164 169 165 170 - name: "Build & Push Container" 166 171 uses: "./.github/actions/build-container"
+2
.github/workflows/release.yaml
··· 60 60 steps: 61 61 - name: Checkout repository 62 62 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 63 + with: 64 + persist-credentials: false 63 65 64 66 - name: "Build Archive" 65 67 id: build