[PR #14] [MERGED] fix: vulnerabilities & secrets error in CI #528

Closed
opened 2026-02-22 17:31:47 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/langgenius/dify-plugins/pull/14
Author: @RockChinQ
Created: 12/28/2024
Status: Merged
Merged: 1/7/2025
Merged by: @RockChinQ

Base: mainHead: ci/sync


📝 Commits (3)

📊 Changes

2 files changed (+18 additions, -29 deletions)

View changed files

📝 .github/workflows/pre-check-plugin.yaml (+12 -17)
📝 .github/workflows/upload-merged-plugin.yaml (+6 -12)

📄 Description

Set persist-credentials: false for actions/checkout to avoid potential git credentials leaking.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/langgenius/dify-plugins/pull/14 **Author:** [@RockChinQ](https://github.com/RockChinQ) **Created:** 12/28/2024 **Status:** ✅ Merged **Merged:** 1/7/2025 **Merged by:** [@RockChinQ](https://github.com/RockChinQ) **Base:** `main` ← **Head:** `ci/sync` --- ### 📝 Commits (3) - [`c7b94a3`](https://github.com/langgenius/dify-plugins/commit/c7b94a316e1f1bf56ac7544a0f5101060a73f044) fix: potential vulnerabilities in CI - [`92df7a7`](https://github.com/langgenius/dify-plugins/commit/92df7a7a56fc11f68e6164cc54ea33a55d0d63ed) ci: fix secrets invalid error - [`34ae097`](https://github.com/langgenius/dify-plugins/commit/34ae0973e0d2af208d339a3106a41b7f65cda166) ci: fix ### 📊 Changes **2 files changed** (+18 additions, -29 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/pre-check-plugin.yaml` (+12 -17) 📝 `.github/workflows/upload-merged-plugin.yaml` (+6 -12) </details> ### 📄 Description Set `persist-credentials: false` for `actions/checkout` to avoid potential git credentials leaking. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-22 17:31:47 -05:00
yindo closed this issue 2026-02-22 17:31:47 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify-plugins#528