@@ -18,15 +18,11 @@ jobs:
1818name :test
1919runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
2020steps :
21- -name :Harden Runner
22- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
23- with :
24- egress-policy :audit
25-
2621 -name :Checkout
2722uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2823with :
2924fetch-depth :1
25+ persist-credentials :false
3026
3127 -name :Switch XCode Version
3228uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
@@ -44,15 +40,11 @@ jobs:
4440name :fmt
4541runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
4642steps :
47- -name :Harden Runner
48- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
49- with :
50- egress-policy :audit
51-
5243 -name :Checkout
5344uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5445with :
5546fetch-depth :1
47+ persist-credentials :false
5648
5749 -name :Switch XCode Version
5850uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
@@ -70,15 +62,11 @@ jobs:
7062name :lint
7163runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
7264steps :
73- -name :Harden Runner
74- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
75- with :
76- egress-policy :audit
77-
7865 -name :Checkout
7966uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8067with :
8168fetch-depth :1
69+ persist-credentials :false
8270
8371 -name :Setup Nix
8472uses :./.github/actions/nix-devshell