ci: don't persist the checkout token

Nothing after checkout should need the GITHUB_TOKEN so persisting would only be
an extra risk.

Signed-off-by: Andrei Gherzan <andrei@gherzan.com>
This commit is contained in:
Andrei Gherzan committed 2026-10-19 04:47:44 +01:00
1 parent b4dd0415ce
commit 26ddb68f93
3 files changed
+4

No files matched your search

+1
View File
@@ -18,6 +18,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
- name: Check for Yocto relevant changes
id: changed-files-specific
uses: ./.github/actions/changed-files