Skip to content

Do not persist credentials during checkout to prevent exfiltration or accidental logging#10399

Merged
Byron merged 2 commits into
gitbutlerapp:masterfrom
Byron:fix
Sep 22, 2025
Merged

Do not persist credentials during checkout to prevent exfiltration or accidental logging#10399
Byron merged 2 commits into
gitbutlerapp:masterfrom
Byron:fix

Add a workflow to check that all workflows don't persist credentials.

74309c7
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / zizmor succeeded Sep 22, 2025 in 2s

1 new alert

New alerts in code changed by this pull request

  • 1 warning

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 244 in .github/workflows/push.yaml

See this annotation in the file changed.

Code scanning / zizmor

overly broad permissions Warning

overly broad permissions