esl / MongooseIM

85%

master: 86%

LAST BUILD ON BRANCH safe-gh-actions

branch: safe-gh-actions

CHANGE BRANCH

x

Reset

• safe-gh-actions
• 2.0.0
• 2.0.0_mam_metrics
• 2.0.0beta1
• 2.0.1
• 2.0.1-links
• 2.1.0
• 2.1.0alpha1
• 2.1.0alpha10
• 2.1.0alpha2
• 2.1.0alpha3
• 2.1.0alpha4
• 2.1.0alpha6
• 2.1.0alpha7
• 2.1.0alpha8
• 2.1.0alpha9
• 2.1.0beta1
• 2.1.0beta2
• 2.1.1
• 2.2.0
• 2.2.1
• 2.2.2
• 3.0.1
• 3.1.0
• 3.1.1
• 3.2.0
• 3.3.0
• 3.3.0-dummy-auth
• 3.4.0
• 3.4.1
• GH-actions-fix
• GH-actions-fix-rel-6.0
• Try-to-stabilize-rooms-for-rosters
• big_tests/amqp_client-3.9.1
• big_tests/base16-2.0.0
• big_tests/esip.1.0.43
• big_tests/remove-erlsh
• big_tests/remove-gen_fsm_compat
• big_tests/shotgun-0.5.0
• carboncopy-flaky-test
• dashboardtest
• dependencies/cowboy_swagger-2.2.2
• deps/escalus-4.2.3
• deps/gun-1.3.3
• deps/jiffy-1.0.8
• deps/mongoose_jid-1.0.0
• deps/remove-ibrowse
• deps/remove-non-use-chatterbox
• deps/remove-rebar_faster_deps
• develop
• drop_centos
• erlang-28
• exp/escalus-gun-2
• fix-failing-s2s-tests
• fix-gh-actions
• fix-gh-actions-tests
• fix-readme-project-status
• fix/mongoose_metrics_hooks
• fix/run_undefined_host_type
• fix/system_metrics_error
• fixing-global-distrib-suite
• fixing-global-distrib-suite-rel-6.1
• fixing-reporting-to-ga4
• gdpr-remove-vcard
• gdpr-retrieve-clean
• imporve-coveralls-reporting
• mam/iq_fin_transformations
• master
• mu-scope-host
• readme-update
• readme-update-rel-6.1
• rebar3/3.15.2
• refactoring/otp-24.0.2
• refactoring/remove-travis-prefix
• refactoring/simplify-inet_stats
• refactoring/xref
• rel-1.7
• rel-2.0
• rel-2.1
• rel-2.2
• rel-3.0
• rel-3.1
• rel-3.2
• rel-3.3
• rel-3.4
• rel-6.0
• rel-6.1
• rel-6.2
• rel-6.3
• rel-6.4
• reporting-to-ga4
• stable
• update-OTP-version-for-GH-Actions
• update-gh-actions-versions

Build # 12299291228

Build Type

push

github

Committed by gustawlippa

Commit Message

Do not persist credentials on GH Actions

I ran a GH Actions safety checker, which suggested that the
"persist-credentials" option should be set to "false".
The rationale: https://woodruffw.github.io/zizmor/audits/#artipacked. It is not
a big issue for us, as we don't upload artifacts from GH Actions, but using
this option should add a bit of safety anyway.

Run Details

28783 of 33833 relevant lines covered (85.07%)

48655.78 hits per line