Jakob Wennberg f8aef335c9 fix(ci): persist-credentials: false on the privileged compliance-review checkout (#831) ...

Stage 2 holds a write token + AWS secrets and never needs git push creds; don't
leave the token persisted in .git/config for the steps that process the
untrusted diff artifact. Closes the Superagent P2 follow-up.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-30 08:57:58 +02:00

..

compliance-pr.yml

build(deps): bump actions/checkout from 6 to 7 (#764)

2026-06-25 12:39:32 +02:00

compliance-swarm.yml

build(deps): bump actions/checkout from 6 to 7 (#764)

2026-06-25 12:39:32 +02:00

core-build.yml

build(deps): bump actions/checkout from 6 to 7 (#764)

2026-06-25 12:39:32 +02:00

docker-image-scan.yml

build(deps): bump docker/login-action from 3 to 4 (#696)

2026-06-25 12:39:26 +02:00

docker-publish.yml

build(deps): bump actions/checkout from 6 to 7 (#764)

2026-06-25 12:39:32 +02:00

pr-agent.yml

build(deps): bump The-PR-Agent/pr-agent from 0.37.0 to 0.38.0 (#818)

2026-06-29 22:13:40 +02:00

swedish-compliance-diff.yml

fix(ci): fork-safe compliance review (two-stage workflow_run) — safe alternative to #829 (#830)

2026-06-29 23:44:30 +02:00

swedish-compliance-review.yml

fix(ci): persist-credentials: false on the privileged compliance-review checkout (#831)

2026-06-30 08:57:58 +02:00

test-pg-real.yml

build(deps): bump actions/checkout from 6 to 7 (#764)

2026-06-25 12:39:32 +02:00