21345727131
100%

Ran 26 Jan 2026 03:55AM UTC

Jobs 2

Files 1

Run time 1min

Badge

Embed ▾

Committed 26 Jan 2026 03:54AM UTC coverage: 100.0%. Remained the same

Build # 21345727131

Build Type

push

github

Committed by

jrfnl

Commit Message

GH Actions: do not persist credentials

> By default, using `actions/checkout` causes a credential to be persisted in the checked-out repo's `.git/config`, so that subsequent `git` operations can be authenticated.
>
> Subsequent steps may accidentally publicly persist `.git/config`, e.g. by including it in a publicly accessible artifact via `actions/upload-artifact`.
>
> However, even without this, persisting the credential in the `.git/config` is non-ideal unless actually needed.
>
> **Remediation**
>
> Unless needed for `git` operations, `actions/checkout` should be used with `persist-credentials: false`.
>
> If the persisted credential is needed, it should be made explicit with `persist-credentials: true`.

This has now been addressed in all workflows.

Refs:
* https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens/
* https://docs.zizmor.sh/audits/#artipacked

Run Details

119 of 119 relevant lines covered (100.0%)

32.1 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	php-8.5 - 21345727131.1	26 Jan 2026 03:55AM UTC	1	100.0	GitHub Action Run
2	php-5.3 - 21345727131.2	26 Jan 2026 03:56AM UTC	1	97.5	GitHub Action Run

php-parallel-lint / PHP-Console-Highlighter / 21345727131
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 21345727131

php-parallel-lint / PHP-Console-Highlighter / 21345727131 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 21345727131

php-parallel-lint / PHP-Console-Highlighter / 21345727131
100%

README BADGES
x