chore: start locking down workflows (#248544)

This commit is contained in:
Raymond Zhao
2025-05-09 11:22:00 -07:00
committed by GitHub
parent 5974364609
commit 15807c660e
6 changed files with 33 additions and 8 deletions

View File

@@ -1,6 +1,7 @@
name: Basic checks
on: workflow_dispatch
permissions: {}
# on:
# push:
@@ -20,6 +21,8 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- uses: actions/checkout@v4
with:
persist-credentials: false
# TODO: rename azure-pipelines/linux/xvfb.init to github-actions
- name: Setup Build Environment
@@ -80,6 +83,8 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- uses: actions/checkout@v4
with:
persist-credentials: false
- uses: actions/setup-node@v4
with:
@@ -146,6 +151,8 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- uses: actions/checkout@v4
with:
persist-credentials: false
- uses: actions/setup-node@v4
with: