persist-credentials: false

Author: eriknw

.github/workflows/lint.yml

@@ -15,6 +15,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          persist-credentials: false
       - uses: actions/setup-python@v6
         with:
           python-version: "3.10"

.github/workflows/test.yml

@@ -24,6 +24,7 @@ jobs:
       uses: actions/checkout@v5
       with:
         fetch-depth: 0
+        persist-credentials: false
     - name: Conda
       uses: conda-incubator/setup-miniconda@v3
       with:

.github/workflows/update_graphblas.yml

@@ -30,6 +30,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - uses: actions/setup-python@v6
         with:

.github/workflows/wheels.yml

@@ -37,6 +37,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Build SDist
         run: pipx run build --sdist
@@ -97,6 +98,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       # aarch64 Linux builds are cross-compiled on x86 runners using emulation
       # see https://cibuildwheel.readthedocs.io/en/stable/faq/#emulation