22912187709
94%
master: 93%

Ran 10 Mar 2026 04:12PM UTC

Jobs 4

Files 9

Run time 1min

Badge

Embed ▾

Committed 10 Mar 2026 04:10PM UTC coverage: 93.732%. First build

Build # 22912187709

Build Type

push

github

Committed by

jrfnl

Commit Message

GH Actions: do not persist credentials

> By default, using `actions/checkout` causes a credential to be persisted in the checked-out repo's `.git/config`, so that subsequent `git` operations can be authenticated.
>
> Subsequent steps may accidentally publicly persist `.git/config`, e.g. by including it in a publicly accessible artifact via `actions/upload-artifact`.
>
> However, even without this, persisting the credential in the `.git/config` is non-ideal unless actually needed.
>
> **Remediation**
>
> Unless needed for `git` operations, `actions/checkout` should be used with `persist-credentials: false`.
>
> If the persisted credential is needed, it should be made explicit with `persist-credentials: true`.

This has now been addressed in all workflows.

Refs:
* https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens/
* https://docs.zizmor.sh/audits/#artipacked

Run Details

1929 of 2058 relevant lines covered (93.73%)

132.91 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	php-8.5-phpcs-4.x-dev - 22912187709.1	10 Mar 2026 04:12PM UTC	9	93.06	GitHub Action Run
2	php-7.4-phpcs-3.5.7 - 22912187709.2	10 Mar 2026 04:12PM UTC	9	92.69	GitHub Action Run
3	php-7.2-phpcs-4.x-dev - 22912187709.3	10 Mar 2026 04:12PM UTC	9	91.83	GitHub Action Run
4	php-5.4-phpcs-3.5.7 - 22912187709.4	10 Mar 2026 04:14PM UTC	9	92.32	GitHub Action Run

jrfnl / phpcs-variable-analysis / 22912187709
94%
master: 93%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 22912187709

jrfnl / phpcs-variable-analysis / 22912187709 94% master: 93%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 22912187709

jrfnl / phpcs-variable-analysis / 22912187709
94%
master: 93%

README BADGES
x