mirror of
https://github.com/Swatinem/rust-cache
synced 2025-10-15 22:00:27 +00:00
ci: disable persist-credentials for dependabot too
I misread this; the GITHUB_TOKEN is used for auth instead of the persisted credential. Signed-off-by: William Woodruff <william@astral.sh>
This commit is contained in:
parent
495a1e25dc
commit
a063781ab2
1 changed files with 1 additions and 1 deletions
2
.github/workflows/dependabot.yml
vendored
2
.github/workflows/dependabot.yml
vendored
|
@ -21,7 +21,7 @@ jobs:
|
|||
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
|
||||
with:
|
||||
fetch-depth: 2
|
||||
persist-credentials: true
|
||||
persist-credentials: false
|
||||
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
|
||||
- name: Check if package-lock.json has been changed
|
||||
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue