From 3e971ba3781f7f5920285d85523aad3570130077 Mon Sep 17 00:00:00 2001 From: Henrik Grimler Date: Sun, 15 Dec 2024 21:23:35 +0100 Subject: [PATCH] Revert "CI: set persist-credentials=false for actions/checkout@v4" Turns out our CI scripts that git push stuff do use credentials from the checkout script. Revert until we configure scripts to use a token instead. This reverts commit b57505f341cf2f9bfc09b0b19c5b911efb274deb. --- .github/workflows/bootstrap_archives.yml | 3 --- .github/workflows/command_not_found.yml | 1 - .github/workflows/docker_image.yml | 3 --- .github/workflows/package_updates.yml | 2 -- .github/workflows/packages.yml | 5 ----- .github/workflows/vagrant.yml | 2 -- 6 files changed, 16 deletions(-) diff --git a/.github/workflows/bootstrap_archives.yml b/.github/workflows/bootstrap_archives.yml index eac6a0a94d01f8..dba7b909432882 100644 --- a/.github/workflows/bootstrap_archives.yml +++ b/.github/workflows/bootstrap_archives.yml @@ -27,8 +27,6 @@ jobs: steps: - name: Git clone uses: actions/checkout@v4 - with: - persist-credentials: false - name: Create bootstrap archive run: ./scripts/generate-bootstraps.sh --architectures ${{ matrix.arch }} - name: Store artifacts @@ -46,7 +44,6 @@ jobs: uses: actions/checkout@v4 with: fetch-depth: 0 - persist-credentials: false - name: Fetch bootstrap archives uses: actions/download-artifact@v4 with: diff --git a/.github/workflows/command_not_found.yml b/.github/workflows/command_not_found.yml index 07faa1398e0b06..2fb12d1b60c6fd 100644 --- a/.github/workflows/command_not_found.yml +++ b/.github/workflows/command_not_found.yml @@ -20,7 +20,6 @@ jobs: with: fetch-depth: 1 token: ${{ secrets.TERMUXBOT2_TOKEN }} - persist-credentials: false - name: Revbump main/command-not-found env: GITHUB_TOKEN: ${{ secrets.TERMUXBOT2_TOKEN }} diff --git a/.github/workflows/docker_image.yml b/.github/workflows/docker_image.yml index 7dfeedf9325737..c629deb8cc6a29 100644 --- a/.github/workflows/docker_image.yml +++ b/.github/workflows/docker_image.yml @@ -24,8 +24,6 @@ jobs: steps: - name: Clone repository uses: actions/checkout@v4 - with: - persist-credentials: false - name: Build run: | cd ./scripts @@ -46,7 +44,6 @@ jobs: with: username: grimler password: ${{ secrets.DOCKER_TOKEN }} - persist-credentials: false - name: Push if: github.ref == 'refs/heads/master' && github.event_name != 'pull_request' && github.repository == 'termux/termux-packages' run: | diff --git a/.github/workflows/package_updates.yml b/.github/workflows/package_updates.yml index ffc23613a6c3ec..e280d4a4e08702 100644 --- a/.github/workflows/package_updates.yml +++ b/.github/workflows/package_updates.yml @@ -37,7 +37,6 @@ jobs: with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} - persist-credentials: false - name: Gather build summary run: | BASE_COMMIT=$(jq --raw-output .pull_request.base.sha "$GITHUB_EVENT_PATH") @@ -138,7 +137,6 @@ jobs: with: fetch-depth: 0 token: ${{ secrets.TERMUXBOT2_TOKEN }} - persist-credentials: false - name: Free additional disk space run: | sudo apt purge -yq $(dpkg -l | grep '^ii' | awk '{ print $2 }' | grep -P '(aspnetcore|cabal-|dotnet-|ghc-|libmono|mongodb-|mysql-|php)') \ diff --git a/.github/workflows/packages.yml b/.github/workflows/packages.yml index 6abff34dabf8b2..a805acd06df43e 100644 --- a/.github/workflows/packages.yml +++ b/.github/workflows/packages.yml @@ -37,7 +37,6 @@ jobs: uses: actions/checkout@v4 with: fetch-depth: 1000 - persist-credentials: false - name: Gather build summary id: build-info env: @@ -284,8 +283,6 @@ jobs: steps: - name: Clone repository uses: actions/checkout@v4 - with: - persist-credentials: false - name: Get *.deb files uses: actions/download-artifact@v4 with: @@ -353,8 +350,6 @@ jobs: steps: - name: Clone repository uses: actions/checkout@v4 - with: - persist-credentials: false - name: Get *.deb files uses: actions/download-artifact@v4 with: diff --git a/.github/workflows/vagrant.yml b/.github/workflows/vagrant.yml index 1416aedc8e6829..37c11a352b4052 100644 --- a/.github/workflows/vagrant.yml +++ b/.github/workflows/vagrant.yml @@ -28,8 +28,6 @@ jobs: steps: - name: Clone repository uses: actions/checkout@v4 - with: - persist-credentials: false - name: Set up Vagrant repo run: | # https://developer.hashicorp.com/vagrant/downloads#linux