From 69cebe8d66e3169d75161f0e9e57ffde7b61fe78 Mon Sep 17 00:00:00 2001
From: Frazer Smith <frazer.dev@outlook.com>
Date: Fri, 18 Nov 2022 09:33:12 +0000
Subject: [PATCH] ci: remove git credentials after checkout (#1281)

---
 .github/workflows/lint.yml                | 3 +++
 .github/workflows/markdown-link-check.yml | 2 ++
 .github/workflows/nodejs.yml              | 8 ++++++++
 .github/workflows/prepare-cache.yml       | 2 ++
 .github/workflows/smoke-test.yml          | 2 ++
 .github/workflows/test.yml                | 2 ++
 6 files changed, 19 insertions(+)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f12114b13..e0525c074 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,6 +11,7 @@ jobs:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
+          persist-credentials: false
       - uses: wagoid/commitlint-github-action@v5
         with:
           configFile: './package.json'
@@ -24,6 +25,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - name: Danger
         uses: danger/danger-js@11.2.0
         env:
diff --git a/.github/workflows/markdown-link-check.yml b/.github/workflows/markdown-link-check.yml
index d31553ee4..f1205e8b1 100644
--- a/.github/workflows/markdown-link-check.yml
+++ b/.github/workflows/markdown-link-check.yml
@@ -23,6 +23,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
         with:
           node-version: lts/*
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index fdc23a94b..69823c382 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -36,6 +36,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
         with:
           node-version: lts/*
@@ -50,6 +52,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
         with:
           node-version: lts/*
@@ -73,6 +77,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:
@@ -142,6 +148,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
         with:
           node-version: lts/*
diff --git a/.github/workflows/prepare-cache.yml b/.github/workflows/prepare-cache.yml
index 0ba407b5e..24e79caa7 100644
--- a/.github/workflows/prepare-cache.yml
+++ b/.github/workflows/prepare-cache.yml
@@ -14,6 +14,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v3
         with:
diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml
index f0a02e1f1..a4cbbc6b6 100644
--- a/.github/workflows/smoke-test.yml
+++ b/.github/workflows/smoke-test.yml
@@ -18,6 +18,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
         with:
           node-version: 16
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 089b9e6cc..e3720bcd0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,6 +14,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
         with:
           node-version: lts/*