@@ -18,15 +18,13 @@ jobs:
18
18
name :test
19
19
runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
20
20
steps :
21
- -name :Harden Runner
22
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
23
- with :
24
- egress-policy :audit
25
-
26
21
-name :Checkout
27
22
uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
28
23
with :
29
24
fetch-depth :1
25
+ persist-credentials :false
26
+
27
+ -run :git fetch --tags
30
28
31
29
-name :Switch XCode Version
32
30
uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
@@ -44,15 +42,13 @@ jobs:
44
42
name :fmt
45
43
runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
46
44
steps :
47
- -name :Harden Runner
48
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
49
- with :
50
- egress-policy :audit
51
-
52
45
-name :Checkout
53
46
uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
54
47
with :
55
48
fetch-depth :1
49
+ persist-credentials :false
50
+
51
+ -run :git fetch --tags
56
52
57
53
-name :Switch XCode Version
58
54
uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
@@ -70,15 +66,13 @@ jobs:
70
66
name :lint
71
67
runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
72
68
steps :
73
- -name :Harden Runner
74
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
75
- with :
76
- egress-policy :audit
77
-
78
69
-name :Checkout
79
70
uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
80
71
with :
81
72
fetch-depth :1
73
+ persist-credentials :false
74
+
75
+ -run :git fetch --tags
82
76
83
77
-name :Setup Nix
84
78
uses :./.github/actions/nix-devshell