This is an automated email from the ASF dual-hosted git repository.

kezhenxu94 pushed a commit to branch test-docker
in repository https://gitbox.apache.org/repos/asf/skywalking.git

commit 13b4096aea3b99ebc7253b50b9eba7c3b6d59ce4
Author: kezhenxu94 <[email protected]>
AuthorDate: Mon Apr 21 11:44:45 2025 +0800

    Remove credentials after checkout
---
 .github/workflows/codeql.yaml                     |  1 +
 .github/workflows/publish-docker-e2e-service.yaml |  1 +
 .github/workflows/publish-docker.yaml             |  1 +
 .github/workflows/skywalking.yaml                 | 12 ++++++++++++
 4 files changed, 15 insertions(+)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index aae0290199..59f762f808 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -51,6 +51,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
diff --git a/.github/workflows/publish-docker-e2e-service.yaml 
b/.github/workflows/publish-docker-e2e-service.yaml
index 4c13130f2f..661053ec40 100644
--- a/.github/workflows/publish-docker-e2e-service.yaml
+++ b/.github/workflows/publish-docker-e2e-service.yaml
@@ -42,6 +42,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - name: Cache local Maven repository
         uses: actions/cache@v4
         with:
diff --git a/.github/workflows/publish-docker.yaml 
b/.github/workflows/publish-docker.yaml
index 2332526f16..c5bf734e54 100644
--- a/.github/workflows/publish-docker.yaml
+++ b/.github/workflows/publish-docker.yaml
@@ -39,6 +39,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - name: Cache local Maven repository
         uses: actions/cache@v4
         with:
diff --git a/.github/workflows/skywalking.yaml 
b/.github/workflows/skywalking.yaml
index 3158ca364b..06731273ac 100644
--- a/.github/workflows/skywalking.yaml
+++ b/.github/workflows/skywalking.yaml
@@ -40,6 +40,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - name: Check license header
         uses: apache/skywalking-eyes@5b7ee1731d036b5aac68f8bd3fc9e6f98ada082e
 
@@ -52,6 +53,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - name: Check code style
         run: ./mvnw -B -q clean checkstyle:check
 
@@ -67,6 +69,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - uses: actions/setup-java@v4
         with:
           distribution: "temurin"
@@ -115,6 +118,7 @@ jobs:
         with:
           fetch-depth: 0
           submodules: true
+          persist-credentials: false
       - name: Filter
         id: filter
         uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36
@@ -164,6 +168,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - uses: actions/setup-java@v4
         with:
           distribution: "temurin"
@@ -198,6 +203,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - uses: actions/download-artifact@v4
         name: Download distribution tar
         with:
@@ -242,6 +248,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - name: Cache maven repository
         uses: actions/cache@v4
         with:
@@ -270,6 +277,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - name: Cache maven repository
         uses: actions/cache@v4
         with:
@@ -304,6 +312,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - name: Cache maven repository
         uses: actions/cache@v4
         with:
@@ -703,6 +712,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - uses: actions/download-artifact@v4
         name: Download docker images
         with:
@@ -782,6 +792,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - uses: actions/download-artifact@v4
         name: Download docker images
         with:
@@ -833,6 +844,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
       - uses: actions/download-artifact@v4
         name: Download docker images
         with:

Reply via email to