Disable persist-credentials when checking out system tests

DataDog · Aug 30, 2024 · 1f37a23 · 1f37a23
1 parent 8b88cdd
commit 1f37a23
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/lib-injection.yml b/.github/workflows/lib-injection.yml
@@ -58,9 +58,10 @@ jobs:
       uses: actions/checkout@v4
       with:
           repository: 'DataDog/system-tests'
+          persist-credentials: false
 
     - name: Install runner
-      uses: ./.github/actions/install_runner 
+      uses: ./.github/actions/install_runner
 
     - name: Run K8s Lib Injection Tests
       run: ./run.sh K8S_LIB_INJECTION_BASIC
@@ -91,6 +92,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: DataDog/system-tests
+          persist-credentials: false
           path: system-tests
       - name: Overwrite auto inject script with commit SHA
         run: |

diff --git a/.github/workflows/system-tests.yml b/.github/workflows/system-tests.yml
@@ -31,6 +31,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: 'DataDog/system-tests'
+          persist-credentials: false
       - name: Pull released image
         run: |
           if docker pull ${{ env.REPO }}/system-tests/${{ matrix.image.name }}:latest; then
@@ -104,6 +105,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: 'DataDog/system-tests'
+          persist-credentials: false
       - name: Checkout ${{ matrix.library.repository }}
         uses: actions/checkout@v4
         with:
@@ -250,6 +252,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: 'DataDog/system-tests'
+          persist-credentials: false
       - name: Pull runner image
         run: |
           docker pull ${{ env.REPO }}/system-tests/runner:gha${{ github.run_id }}-g${{ github.sha }}
@@ -316,6 +319,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: 'DataDog/system-tests'
+          persist-credentials: false
       - name: Retrieve logs
         uses: actions/download-artifact@v4
         with: