Don't persist credentials so PAT is used on push (#24)

* Don't persist credentials so PAT is used on push per https://github.com/orgs/community/discussions/26220 * Bump NEWS
CDCgov · Sep 4, 2024 · 61808b1 · 61808b1
1 parent 9152bc0
commit 61808b1
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.github/workflows/pr-commands.yaml b/.github/workflows/pr-commands.yaml
@@ -16,6 +16,8 @@ jobs:
       GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: r-lib/actions/pr-fetch@v2
         with:
@@ -53,6 +55,8 @@ jobs:
       GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: r-lib/actions/pr-fetch@v2
         with:

diff --git a/NEWS.md b/NEWS.md
@@ -1,7 +1,7 @@
 # CFAEpiNow2Pipeline (development version)
 
 * Parameters read from local parquet file or files
-* Additional CI bug squashing
+* Additional CI bugs squashed
 * Bug fixed in the updated, faster pre-commit checks
 * Updated, faster pre-commit checks
 * Azure Blob file download utilities