@@ -18,15 +18,13 @@ jobs:
1818name :test
1919runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
2020steps :
21- -name :Harden Runner
22- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
23- with :
24- egress-policy :audit
25-
2621 -name :Checkout
2722uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2823with :
2924fetch-depth :1
25+ persist-credentials :false
26+
27+ -run :git fetch --tags
3028
3129 -name :Switch XCode Version
3230uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
@@ -44,15 +42,13 @@ jobs:
4442name :fmt
4543runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
4644steps :
47- -name :Harden Runner
48- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
49- with :
50- egress-policy :audit
51-
5245 -name :Checkout
5346uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5447with :
5548fetch-depth :1
49+ persist-credentials :false
50+
51+ -run :git fetch --tags
5652
5753 -name :Switch XCode Version
5854uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
@@ -70,15 +66,13 @@ jobs:
7066name :lint
7167runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
7268steps :
73- -name :Harden Runner
74- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
75- with :
76- egress-policy :audit
77-
7869 -name :Checkout
7970uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8071with :
8172fetch-depth :1
73+ persist-credentials :false
74+
75+ -run :git fetch --tags
8276
8377 -name :Setup Nix
8478uses :./.github/actions/nix-devshell