From 4a7ab06c00db3bb6193f57c69dda24b37406a6f8 Mon Sep 17 00:00:00 2001 From: Egor Tensin Date: Tue, 20 Oct 2026 23:47:04 +0300 Subject: fix zizmor warnings --- .github/workflows/maintenance.yml | 3 +++ 1 file changed, 3 insertions(+) (limited to '.github/workflows/maintenance.yml') diff --git a/.github/workflows/maintenance.yml b/.github/workflows/maintenance.yml index 07e2267..2dc3d71 100644 --- a/.github/workflows/maintenance.yml +++ b/.github/workflows/maintenance.yml @@ -7,6 +7,8 @@ on: - cron: '30 02 * * 5' workflow_dispatch: +permissions: {} + jobs: maintenance: runs-on: ubuntu-latest @@ -15,6 +17,7 @@ jobs: - name: Checkout uses: actions/checkout@v7 with: + persist-credentials: false # I think that by default, pushes don't trigger other workflows, and # you need a separate token for that: # https://docs.github.com/en/actions/how-tos/write-workflows/choose-when-workflows-run/trigger-a-workflow#triggering-a-workflow-from-a-workflow -- cgit v1.3