Do not persist credentials for release checkouts

pantheon-systems · Dec 12, 2023 · eab8f4c · eab8f4c
1 parent 1dc669b
commit eab8f4c
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/.github/workflows/canary-release.yml b/.github/workflows/canary-release.yml
@@ -22,7 +22,9 @@ jobs:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
-          token: ${{ secrets.ACCESS_TOKEN }}
+          # workaround to ensure force pushes to changeset branch use machine account
+          # see https://github.com/changesets/action/issues/70
+          persist-credentials: false
       - uses: pnpm/action-setup@v2
         with:
           version: 8.8.0

diff --git a/.github/workflows/release-and-split.yml b/.github/workflows/release-and-split.yml
@@ -99,7 +99,9 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
         with:
-          token: ${{ secrets.ACCESS_TOKEN }}
+          # workaround to ensure force pushes to changeset branch use machine account
+          # see https://github.com/changesets/action/issues/70
+          persist-credentials: false
 
       - name: Setup node
         if: ${{ matrix.generator_cmd != '' }}