Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Always Set persist-credentials: false in actions/checkout

There's a default in actions/checkout\ that most teams never change — and that quietly leaves a GitHub token sitting in a readable file for every subsequent step in the job. The fix is one line.

  • Set persist-credentials to false in actions/checkout
  • Default action writes git credential config file
  • Deleting file after checkout prevents security risk

More from Friday 30 October →