From 427df01d4ed5af33899685dc34ff3d43598c965d Mon Sep 17 00:00:00 2001 From: Peter Steinberger Date: Sat, 30 May 2026 21:12:50 +0100 Subject: [PATCH] ci(release): checkout approval helper --- .github/workflows/openclaw-npm-release.yml | 5 +++++ .github/workflows/plugin-clawhub-release.yml | 5 +++++ .github/workflows/plugin-npm-release.yml | 5 +++++ 3 files changed, 15 insertions(+) diff --git a/.github/workflows/openclaw-npm-release.yml b/.github/workflows/openclaw-npm-release.yml index f4fcc08f7093..06caaa21a0ca 100644 --- a/.github/workflows/openclaw-npm-release.yml +++ b/.github/workflows/openclaw-npm-release.yml @@ -372,6 +372,11 @@ jobs: actions: read contents: read steps: + - name: Checkout + uses: actions/checkout@v6 + with: + persist-credentials: false + - name: Require trusted workflow ref for publish env: RELEASE_TAG: ${{ inputs.tag }} diff --git a/.github/workflows/plugin-clawhub-release.yml b/.github/workflows/plugin-clawhub-release.yml index 5623da2ced32..5b552df8e751 100644 --- a/.github/workflows/plugin-clawhub-release.yml +++ b/.github/workflows/plugin-clawhub-release.yml @@ -207,6 +207,11 @@ jobs: actions: read contents: read steps: + - name: Checkout + uses: actions/checkout@v6 + with: + persist-credentials: false + - name: Validate release publish approval run env: GH_TOKEN: ${{ github.token }} diff --git a/.github/workflows/plugin-npm-release.yml b/.github/workflows/plugin-npm-release.yml index 07c4fd56edc0..e7883771c1ea 100644 --- a/.github/workflows/plugin-npm-release.yml +++ b/.github/workflows/plugin-npm-release.yml @@ -184,6 +184,11 @@ jobs: actions: read contents: read steps: + - name: Checkout + uses: actions/checkout@v6 + with: + persist-credentials: false + - name: Validate release publish approval run env: GH_TOKEN: ${{ github.token }}