codex

mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

William Woodruff 8bea5d231a [codex] Address some more GHA hygiene issues (#21622 )

This does two things:

- We use `persist-credentials: false` everywhere now. This is
unfortunately not the default in GitHub Actions, but it prevents
`actions/checkout` from dropping `secrets.GITHUB_TOKEN` onto disk.
- We interpose (some) template expansions through environment variables.
I've limited this to contexts that have non-fixed values; contexts that
are fixed (like `*.result`) are not dangerous to expand directly inline
(but maybe we should clean those up in the future for consistency
anyways).

This is a medium-risk change in terms of CI breakage: I did a scan for
usage of `git push` and other commands that implicitly use the persisted
credential, but couldn't find any. Even still, some implicit usages of
the persisted credentials may be lurking. Please ping ww@ if any issues
arise.

8bea5d231a · 2026-05-08 10:19:27 -07:00

History

actions

[codex] Fully qualify hash-pins in GitHub Actions (#21436 )

2026-05-07 14:31:20 -07:00

codex

Fix minor typos in comments and documentation (#10287 )

2026-01-30 22:11:02 -08:00

ISSUE_TEMPLATE

Fix feature request Contributing link (#21688 )

2026-05-08 00:23:40 -07:00

scripts