From 82cb180cd421cd8128486983449a5bf1edf0afa1 Mon Sep 17 00:00:00 2001
From: Egor Tensin <egor@tensin.name>
Date: Wed, 21 Oct 2026 02:37:15 +0300
Subject: fix zizmor warnings

---
 .github/workflows/ci.yml | 5 +++++
 1 file changed, 5 insertions(+)

(limited to '.github/workflows')

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index df69ff6..5ed5e67 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,6 +4,8 @@ on:
   push:
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   test_local:
     strategy:
@@ -15,6 +17,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
         with:
+          persist-credentials: false
           submodules: recursive
 
       - name: Install dependencies
@@ -46,6 +49,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
         with:
+          persist-credentials: false
           submodules: recursive
       - name: Test
         run: make 'test/docker/${{ matrix.distro }}'
@@ -76,6 +80,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
         with:
+          persist-credentials: true
           ref: aur
           submodules: recursive
           token: '${{ secrets.GH_TOKEN }}'
-- 
cgit v1.3