Merge pull request #30332 from tacaswell/harden_gha

ksunden · web-flow · commit b25ff8034b2b · 2025-07-24T13:51:55.000-05:00
CI: Harden GHA configuration
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
@@ -13,6 +13,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
         with:
           fetch-depth: 0
+          persist-credentials: false
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
         with:
           python-version: "3.x"
