Stefan/evcc-io
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: GitHub actions security (#23951)

Browse source
This commit is contained in:
Michael Geers 2025-10-01 12:17:44 +02:00 • committed by GitHub
parent 57f6a11eef
commit d78ccba845
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 92 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

29
.github/workflows/default.yml vendored
View file

@ -12,8 +12,13 @@ jobs:
name: Clean
runs-on: depot-ubuntu-24.04-arm
permissions:
contents: read
steps:
- uses: actions/checkout@v5
with:
persist-credentials: false
- uses: actions/setup-go@v6
with:
@ -47,8 +52,13 @@ jobs:
name: Build
runs-on: depot-ubuntu-24.04-arm
permissions:
contents: read
steps:
- uses: actions/checkout@v5
with:
persist-credentials: false
- uses: actions/setup-go@v6
with:
@ -80,8 +90,13 @@ jobs:
name: Test
runs-on: depot-ubuntu-24.04-arm
permissions:
contents: read
steps:
- uses: actions/checkout@v5
with:
persist-credentials: false
- uses: actions/setup-go@v6
with:
@ -106,8 +121,13 @@ jobs:
name: Lint
runs-on: depot-ubuntu-24.04-arm
permissions:
contents: read
steps:
- uses: actions/checkout@v5
with:
persist-credentials: false
- uses: actions/setup-go@v6
with:
@ -140,10 +160,13 @@ jobs:
name: UI
permissions:
contents: read
actions: write
runs-on: depot-ubuntu-24.04-arm
steps:
- uses: actions/checkout@v5
with:
persist-credentials: false
- uses: actions/setup-node@v4
with:
@ -180,8 +203,14 @@ jobs:
name: Integration
runs-on: depot-ubuntu-24.04-arm-16
permissions:
contents: read
actions: write
steps:
- uses: actions/checkout@v5
with:
persist-credentials: false
- uses: actions/setup-go@v6
with: