Repository navigation
[CI] Set persist-credentials: false in checkout actions #49728
Description
Describe the enhancement
Most actions/checkout steps do not set persist-credentials: false. Setting this option is a recommended best practice to avoid credentials being stored in the local git config after checkout.
This affects 56 checkout steps across most workflow files. The zizmor tool can auto-fix these.
Example
Before:
- uses: actions/checkout@v6
with:
fetch-depth: 0After:
- uses: actions/checkout@v6
with:
fetch-depth: 0
persist-credentials: falseComponent(s)
Continuous Integration
Activity
GH-49728: [CI] Set persist-credentials: false in checkout actions (#4…
thisisnic commentedon Apr 14, 2026
Issue resolved by pull request 49734
#49734
apacheGH-49728: [CI] Set persist-credentials: false in checkout actio…