From 73b503880fbf9c51229d4c3bbe87968d751ab0a0 Mon Sep 17 00:00:00 2001 From: Morgan Chen Date: Tue, 7 Jul 2026 16:13:11 -0700 Subject: [PATCH] fix zizmor findings --- .github/workflows/android.yml | 2 ++ .github/workflows/e2e_test.yml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml index 1d6487a2a..4f0d64470 100644 --- a/.github/workflows/android.yml +++ b/.github/workflows/android.yml @@ -13,6 +13,8 @@ jobs: timeout-minutes: 30 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Cache Gradle packages uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 diff --git a/.github/workflows/e2e_test.yml b/.github/workflows/e2e_test.yml index c04eaf002..6c381cd54 100644 --- a/.github/workflows/e2e_test.yml +++ b/.github/workflows/e2e_test.yml @@ -13,6 +13,8 @@ jobs: timeout-minutes: 30 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Cache Gradle packages uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0