🏁 Script executed:

#!/bin/bash
set -euo pipefail

git ls-files .github/workflows/ci.yml
echo '---'
cat -n .github/workflows/ci.yml | sed -n '1,220p'

Repository: stakekit/perps-widget

Length of output: 1610

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Show workflow structure and any later steps that might rely on git credentials.
ast-grep outline .github/workflows/ci.yml --view expanded || true
echo '---'
rg -n "checkout|persist-credentials|git config|push|fetch|submodule|npm|pnpm|yarn|cargo|go test|pip|install" .github/workflows/ci.yml

Repository: stakekit/perps-widget

Length of output: 507

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "File:"
git ls-files .github/workflows/ci.yml

echo
echo "Content:"
cat -n .github/workflows/ci.yml | sed -n '1,220p'

echo
echo "Relevant matches:"
rg -n "checkout|persist-credentials|git config|push|fetch|submodule|npm|pnpm|yarn|cargo|go test|pip|install" .github/workflows/ci.yml || true

Repository: stakekit/perps-widget

Length of output: 1946

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "File:"
git ls-files .github/workflows/ci.yml

echo
echo "Content:"
cat -n .github/workflows/ci.yml | sed -n '1,220p'

echo
echo "Relevant matches:"
rg -n "checkout|persist-credentials|git config|push|fetch|submodule|npm|pnpm|yarn|cargo|go test|pip|install" .github/workflows/ci.yml || true

Repository: stakekit/perps-widget

Length of output: 1946

🌐 Web query:

actions/checkout persist-credentials default true documentation

💡 Result:

In the GitHub actions/checkout action, the persist-credentials input is enabled by default (default: true) [1][2]. When set to true (the default), the action configures the authentication token or SSH key with the local Git configuration [3][1]. This allows subsequent steps in your workflow to execute authenticated Git commands (such as git fetch or git push) without requiring additional configuration [3][4]. The action automatically removes these credentials during the post-job cleanup process [3][5]. If you wish to prevent the action from configuring these credentials, you can set persist-credentials to false [3][6]: - with: persist-credentials: false Recent updates have improved the security of this feature by storing credentials in a file under $RUNNER_TEMP rather than directly within.git/config, while maintaining the same default behavior and functionality [3][7].

Citations:

• 1: https://github.com/actions/checkout/blob/master/action.yml
• 2: https://github.com/actions/checkout/blob/main/action.yml
• 3: https://github.com/actions/checkout/?tab=readme-ov-file
• 4: https://github.com/marketplace/actions/checkout?version=v3.6.0
• 5: https://github.com/actions/checkout
• 6: https://github.com/actions/checkout/blob/main/README.md
• 7: https://github.com/marketplace/actions/checkout