Harden workflows

This commit is contained in:
Sebastian Bergmann 2026-05-13 08:22:56 +02:00
parent 2308f4f1ce
commit d26874f911
No known key found for this signature in database
2 changed files with 7 additions and 1 deletions

View File

@ -26,6 +26,7 @@ jobs:
with:
fetch-depth: 1
ref: ${{ github.event.pull_request.head.sha || github.sha }}
persist-credentials: false
- name: Use local branch
shell: bash
@ -65,6 +66,7 @@ jobs:
with:
fetch-depth: 1
ref: ${{ github.event.pull_request.head.sha || github.sha }}
persist-credentials: false
- name: Use local branch
shell: bash
@ -116,6 +118,7 @@ jobs:
with:
fetch-depth: 1
ref: ${{ github.event.pull_request.head.sha || github.sha }}
persist-credentials: false
- name: Use local branch
shell: bash
@ -174,6 +177,7 @@ jobs:
with:
fetch-depth: 1
ref: ${{ github.event.pull_request.head.sha || github.sha }}
persist-credentials: false
- name: Use local branch
shell: bash

View File

@ -19,6 +19,8 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@v4
with:
persist-credentials: false
- name: Install PHP with extensions
uses: shivammathur/setup-php@v2
@ -32,7 +34,7 @@ jobs:
run: echo "RELEASE_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
- name: Parse ChangeLog
run: build/scripts/extract-release-notes.php ${{ env.RELEASE_TAG }} > release-notes.md
run: build/scripts/extract-release-notes.php ${RELEASE_TAG} > release-notes.md
- name: Create release
uses: ncipollo/release-action@v1