Myasnikov DaniilandClaude Opus 4.8 f3914d2053 ci(build): disable credential persistence in build-cache checkout ...

The build-main cache warmer is a privileged workflow (packages:write + an OCIR
push token) and never pushes git, so set persist-credentials: false to keep the
checkout's GITHUB_TOKEN out of .git/config where a later build step could read
it. (SHA-pinning the actions is handled repo-wide in #2849.)

Addresses non-blocking follow-up 7 on #2948.

Assisted-By: Claude <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>

2026-06-20 16:35:50 +05:00

..

ISSUE_TEMPLATE

chore(ci): adopt CNCF/k8s label conventions

2026-04-27 03:15:09 +03:00

workflows

ci(build): disable credential persistence in build-cache checkout

2026-06-20 16:35:50 +05:00

CODEOWNERS

chore(maintenance): add @myasnikovdaniil to CODEOWNERS

2026-04-21 14:31:07 +05:00

labels.yml

chore(ci): replace Dosu stale and size labeling with native workflows

2026-04-27 18:00:01 +03:00

PULL_REQUEST_TEMPLATE.md

docs(maintenance): mirror illustrative-scopes wording in PR template

2026-04-27 11:20:13 +03:00

renovate.json

ci: add Go-scoped Renovate configuration

2026-06-08 20:53:51 +05:00