Skip to content

Conversation

@jmeridth
Copy link
Member

No description provided.

@jmeridth jmeridth self-assigned this Sep 12, 2025
@jmeridth jmeridth requested a review from a team as a code owner September 12, 2025 19:06
Copilot AI review requested due to automatic review settings September 12, 2025 19:06
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds security configuration to GitHub Actions workflows by setting persist-credentials: false for checkout actions. This prevents GitHub credentials from being persisted in the Git configuration after repository checkout, reducing potential security risks from credential exposure.

  • Added persist-credentials: false to all actions/checkout@v5 steps across multiple workflow files
  • Ensures credentials are not available to subsequent steps that don't explicitly need them
  • Maintains existing workflow functionality while improving security posture

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
.github/workflows/release-image.yaml Added persist-credentials: false to checkout step in image release workflow
.github/workflows/major-version-updater.yaml Added persist-credentials: false to checkout step in version updater workflow
.github/workflows/labeler.yaml Added persist-credentials: false to checkout step in PR labeler workflow
.github/workflows/actionlint.yaml Added persist-credentials: false to checkout step in workflow linting job

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@jmeridth jmeridth merged commit 2d87847 into main Sep 12, 2025
8 checks passed
@jmeridth jmeridth deleted the jm_checkout_do_not_persist_credentials branch September 12, 2025 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants