From a23239ee9c3cc18bfe1d6e01be0a15fb7f5ce798 Mon Sep 17 00:00:00 2001 From: Bruno Borges Date: Tue, 14 Jul 2026 16:09:30 -0400 Subject: [PATCH] Harden set-default Checkout in e2e-versions.yml (persist-credentials: false) The Checkout step in the set-default option job was the only one of 17 checkout steps in the workflow missing persist-credentials: false, flagged by zizmor's artipacked audit. Align it with the rest of the file. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/workflows/e2e-versions.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/e2e-versions.yml b/.github/workflows/e2e-versions.yml index 276d0612..d4463d6d 100644 --- a/.github/workflows/e2e-versions.yml +++ b/.github/workflows/e2e-versions.yml @@ -704,6 +704,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@v7 + with: + persist-credentials: false - name: Setup Java 17 as default uses: ./ id: setup-java-17