diff --git a/.github/workflows/api.yml b/.github/workflows/api.yml index 83bfa478eed..ae2205bc73d 100644 --- a/.github/workflows/api.yml +++ b/.github/workflows/api.yml @@ -19,6 +19,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: diff --git a/.github/workflows/build-server-image.yml b/.github/workflows/build-server-image.yml index 0293651cfc7..d4163321d25 100644 --- a/.github/workflows/build-server-image.yml +++ b/.github/workflows/build-server-image.yml @@ -30,6 +30,8 @@ jobs: steps: - name: buildenv/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: buildenv/docker-login uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 @@ -76,6 +78,8 @@ jobs: identity: ${{ env.CHAINCTL_IDENTITY }} - name: buildenv/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: buildenv/docker-login uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 8b403b3b172..be4b70dbd02 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -24,6 +24,7 @@ jobs: issues: read id-token: write steps: + # Keep persist-credentials default while anthropics/claude-code-action#1236 is open - name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 1edad68768d..5b26944cd72 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -26,6 +26,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/config-change-checker.yml b/.github/workflows/config-change-checker.yml index 0772baaf0e6..4ff5d063772 100644 --- a/.github/workflows/config-change-checker.yml +++ b/.github/workflows/config-change-checker.yml @@ -45,6 +45,7 @@ jobs: - name: Checkout code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false # Fetch enough history to diff against the base branch fetch-depth: 0 diff --git a/.github/workflows/docker-push-mirrored.yml b/.github/workflows/docker-push-mirrored.yml index f59e9136cf2..1fb5c7dcb64 100644 --- a/.github/workflows/docker-push-mirrored.yml +++ b/.github/workflows/docker-push-mirrored.yml @@ -15,6 +15,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: cd/Login to Docker Hub uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 with: diff --git a/.github/workflows/e2e-fulltests-ci.yml b/.github/workflows/e2e-fulltests-ci.yml index 7b74193af00..8fe023df518 100644 --- a/.github/workflows/e2e-fulltests-ci.yml +++ b/.github/workflows/e2e-fulltests-ci.yml @@ -115,6 +115,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: "${{ inputs.ref || github.sha }}" fetch-depth: 0 - name: ci/generate-test-variables diff --git a/.github/workflows/e2e-tests-check.yml b/.github/workflows/e2e-tests-check.yml index 13cd9b45fca..48a47511326 100644 --- a/.github/workflows/e2e-tests-check.yml +++ b/.github/workflows/e2e-tests-check.yml @@ -15,6 +15,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false fetch-depth: 0 - name: ci/setup-node diff --git a/.github/workflows/e2e-tests-ci-template.yml b/.github/workflows/e2e-tests-ci-template.yml index 83d8b93c33d..128457245b3 100644 --- a/.github/workflows/e2e-tests-ci-template.yml +++ b/.github/workflows/e2e-tests-ci-template.yml @@ -125,6 +125,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/generate-build-variables @@ -151,6 +152,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-node @@ -229,6 +231,7 @@ jobs: # overwrites the workspace with inputs.commit_sha. uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false sparse-checkout: .github/actions sparse-checkout-cone-mode: true - name: ci/runner-prep-for-openldap @@ -236,6 +239,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-macos-docker @@ -342,6 +346,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/download-artifacts diff --git a/.github/workflows/e2e-tests-ci.yml b/.github/workflows/e2e-tests-ci.yml index 0fd3bfce030..48bdc109863 100644 --- a/.github/workflows/e2e-tests-ci.yml +++ b/.github/workflows/e2e-tests-ci.yml @@ -39,6 +39,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false fetch-depth: 0 - name: ci/resolve-pr-and-commit @@ -131,6 +132,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ needs.resolve-pr.outputs.COMMIT_SHA }} fetch-depth: 0 - name: ci/check-relevant-changes diff --git a/.github/workflows/e2e-tests-cypress-template-v2.yml b/.github/workflows/e2e-tests-cypress-template-v2.yml index f08b7ec9f32..c4a71d599f6 100644 --- a/.github/workflows/e2e-tests-cypress-template-v2.yml +++ b/.github/workflows/e2e-tests-cypress-template-v2.yml @@ -149,6 +149,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 1 - name: ci/composite-identity @@ -205,6 +206,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 1 - name: ci/setup-node @@ -240,6 +242,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 1 - name: ci/dispatch-begin @@ -296,6 +299,7 @@ jobs: # overwrites the workspace with inputs.commit_sha. uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false sparse-checkout: .github/actions sparse-checkout-cone-mode: true - name: ci/runner-prep-for-openldap @@ -303,6 +307,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-node @@ -364,6 +369,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/run-summary id: summary continue-on-error: true diff --git a/.github/workflows/e2e-tests-cypress-template.yml b/.github/workflows/e2e-tests-cypress-template.yml index a765b06b9fd..4ea11d65f65 100644 --- a/.github/workflows/e2e-tests-cypress-template.yml +++ b/.github/workflows/e2e-tests-cypress-template.yml @@ -146,6 +146,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-node @@ -207,6 +208,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-node @@ -255,6 +257,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/download-results uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: @@ -301,6 +305,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-node @@ -350,6 +355,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup-node uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: diff --git a/.github/workflows/e2e-tests-on-merge.yml b/.github/workflows/e2e-tests-on-merge.yml index b8f3a3d907a..07ce0198dd8 100644 --- a/.github/workflows/e2e-tests-on-merge.yml +++ b/.github/workflows/e2e-tests-on-merge.yml @@ -27,6 +27,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.branch }} fetch-depth: 50 - name: ci/generate-variables diff --git a/.github/workflows/e2e-tests-on-release.yml b/.github/workflows/e2e-tests-on-release.yml index f3cfac3cb78..0ab2e17606c 100644 --- a/.github/workflows/e2e-tests-on-release.yml +++ b/.github/workflows/e2e-tests-on-release.yml @@ -30,6 +30,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.branch }} fetch-depth: 50 - name: ci/validate-inputs diff --git a/.github/workflows/e2e-tests-playwright-template-v2.yml b/.github/workflows/e2e-tests-playwright-template-v2.yml index d2d1966209b..60d6e4dcf33 100644 --- a/.github/workflows/e2e-tests-playwright-template-v2.yml +++ b/.github/workflows/e2e-tests-playwright-template-v2.yml @@ -115,6 +115,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 1 - name: ci/composite-identity @@ -172,6 +173,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 1 - name: ci/setup-node @@ -247,6 +249,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 1 - name: ci/dispatch-begin @@ -292,6 +295,7 @@ jobs: # overwrites the workspace with inputs.commit_sha. uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false sparse-checkout: .github/actions sparse-checkout-cone-mode: true - name: ci/runner-prep-for-openldap @@ -299,6 +303,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-node @@ -388,6 +393,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/run-summary id: summary continue-on-error: true diff --git a/.github/workflows/e2e-tests-playwright-template.yml b/.github/workflows/e2e-tests-playwright-template.yml index 80d92d71794..b91c2d61768 100644 --- a/.github/workflows/e2e-tests-playwright-template.yml +++ b/.github/workflows/e2e-tests-playwright-template.yml @@ -165,6 +165,7 @@ jobs: # overwrites the workspace with inputs.commit_sha. uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false sparse-checkout: .github/actions sparse-checkout-cone-mode: true - name: ci/runner-prep-for-openldap @@ -172,6 +173,7 @@ jobs: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false ref: ${{ inputs.commit_sha }} fetch-depth: 0 - name: ci/setup-node @@ -289,6 +291,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup-node uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: @@ -354,6 +358,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup-node uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: diff --git a/.github/workflows/i18n-ci-template.yml b/.github/workflows/i18n-ci-template.yml index e495b4e3d6f..709f6701164 100644 --- a/.github/workflows/i18n-ci-template.yml +++ b/.github/workflows/i18n-ci-template.yml @@ -12,6 +12,8 @@ jobs: steps: - name: Checkout code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Get changed files id: changed-files diff --git a/.github/workflows/mmctl-test-template.yml b/.github/workflows/mmctl-test-template.yml index 5415e25558f..9c17f7c1fe1 100644 --- a/.github/workflows/mmctl-test-template.yml +++ b/.github/workflows/mmctl-test-template.yml @@ -39,6 +39,8 @@ jobs: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Setup BUILD_IMAGE id: build run: | diff --git a/.github/workflows/sentry.yaml b/.github/workflows/sentry.yaml index 1b143d1b0d1..c919ff12cac 100644 --- a/.github/workflows/sentry.yaml +++ b/.github/workflows/sentry.yaml @@ -19,6 +19,8 @@ jobs: steps: - name: cd/Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: cd/Create Sentry release uses: getsentry/action-release@dab6548b3c03c4717878099e43782cf5be654289 # v3.5.0 diff --git a/.github/workflows/server-ci-artifacts.yml b/.github/workflows/server-ci-artifacts.yml index acfde9f4f33..c97c857064e 100644 --- a/.github/workflows/server-ci-artifacts.yml +++ b/.github/workflows/server-ci-artifacts.yml @@ -86,6 +86,7 @@ jobs: if: github.event.workflow_run.head_repository.full_name != github.repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false sparse-checkout: server/build/ sparse-checkout-cone-mode: true diff --git a/.github/workflows/server-ci-nightly-race.yml b/.github/workflows/server-ci-nightly-race.yml index d206cf90efa..e56ae241eb9 100644 --- a/.github/workflows/server-ci-nightly-race.yml +++ b/.github/workflows/server-ci-nightly-race.yml @@ -29,6 +29,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Calculate version id: calculate working-directory: server/ diff --git a/.github/workflows/server-ci-weekly.yml b/.github/workflows/server-ci-weekly.yml index f4d6434add4..8d868c0b5ed 100644 --- a/.github/workflows/server-ci-weekly.yml +++ b/.github/workflows/server-ci-weekly.yml @@ -30,6 +30,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Calculate version id: calculate working-directory: server/ diff --git a/.github/workflows/server-ci.yml b/.github/workflows/server-ci.yml index 769151d95da..9b61bb0dd0a 100644 --- a/.github/workflows/server-ci.yml +++ b/.github/workflows/server-ci.yml @@ -38,6 +38,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Calculate version id: calculate working-directory: server/ @@ -59,6 +61,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Generate mocks @@ -76,6 +80,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Run go mod tidy @@ -93,6 +99,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Run go fix @@ -110,6 +118,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Run golangci @@ -125,6 +135,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Run make-gen-serialized @@ -142,6 +154,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Run mattermost-vet-api @@ -157,6 +171,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Extract migrations files run: make migrations-extract - name: Check migration files @@ -172,6 +188,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Generate email templates run: | npm install -g mjml@4.9.0 @@ -189,6 +207,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Generate store layers @@ -219,6 +239,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Generate default roles permissions @@ -238,6 +260,8 @@ jobs: steps: - name: Checkout mattermost-server uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Run setup-go-work run: make setup-go-work - name: Check docs @@ -382,6 +406,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup-node uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: diff --git a/.github/workflows/server-test-template.yml b/.github/workflows/server-test-template.yml index a8168fa2f47..000368c9c29 100644 --- a/.github/workflows/server-test-template.yml +++ b/.github/workflows/server-test-template.yml @@ -86,6 +86,8 @@ jobs: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Restore test timing data if: inputs.shard-total > 1 diff --git a/.github/workflows/tag-public-module.yaml b/.github/workflows/tag-public-module.yaml index 4ca2c9647b2..8fef2154361 100644 --- a/.github/workflows/tag-public-module.yaml +++ b/.github/workflows/tag-public-module.yaml @@ -28,6 +28,7 @@ jobs: - name: release/checkout-mattermost uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false fetch-depth: 0 - name: release/find-latest-public-module-tags diff --git a/.github/workflows/tools-ci.yml b/.github/workflows/tools-ci.yml index 073acbea651..cf48f96900e 100644 --- a/.github/workflows/tools-ci.yml +++ b/.github/workflows/tools-ci.yml @@ -23,6 +23,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Setup Go uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 with: @@ -39,6 +41,8 @@ jobs: steps: - name: Checkout mattermost project uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Setup Go uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 with: diff --git a/.github/workflows/webapp-ci.yml b/.github/workflows/webapp-ci.yml index 869413d7e58..5ac275a841d 100644 --- a/.github/workflows/webapp-ci.yml +++ b/.github/workflows/webapp-ci.yml @@ -23,6 +23,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/lint @@ -38,6 +40,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/i18n-extract @@ -55,6 +59,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/check-external-links @@ -71,6 +77,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/lint @@ -91,6 +99,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/test @@ -122,6 +132,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/test @@ -154,6 +166,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/test @@ -178,6 +192,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/download-coverage-artifacts @@ -234,6 +250,8 @@ jobs: steps: - name: ci/checkout-repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: ci/setup uses: ./.github/actions/webapp-setup - name: ci/build