From: Maarten Aertsen <maarten@nlnetlabs.nl>
Date: Fri, 13 Dec 2024 12:12:03 +0000 (+0100)
Subject: set persist-credentials: false per zizmor suggestion
X-Git-Tag: release-1.23.0rc1~79^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F1204%2Fhead;p=thirdparty%2Funbound.git

set persist-credentials: false per zizmor suggestion
---

diff --git a/.github/workflows/analysis_ports.yml b/.github/workflows/analysis_ports.yml
index 0388e3cca..85b723912 100644
--- a/.github/workflows/analysis_ports.yml
+++ b/.github/workflows/analysis_ports.yml
@@ -193,6 +193,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: false
+          persist-credentials: false
       - name: test_windows
         if: ${{ matrix.test_windows == 'yes' }}
         shell: bash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f01ed3273..6ca3bc414 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,6 +13,8 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - name: configure
       run: ./configure --enable-debug
     - name: make