From 94ed2926d1b4a6afddd26f67efb02ab9c0804c43 Mon Sep 17 00:00:00 2001
From: Felix Fontein <felix@fontein.de>
Date: Sat, 14 Dec 2024 14:41:10 +0100
Subject: [PATCH] Fix some issues pointed out by zizmor.

---
 .github/workflows/ee.yml          | 3 ++-
 .github/workflows/extra-tests.yml | 1 +
 .github/workflows/reuse.yml       | 2 ++
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ee.yml b/.github/workflows/ee.yml
index c8f73aff..f18f8cfe 100644
--- a/.github/workflows/ee.yml
+++ b/.github/workflows/ee.yml
@@ -67,6 +67,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: ansible_collections/${{ env.NAMESPACE }}/${{ env.COLLECTION_NAME }}
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -100,7 +101,7 @@ jobs:
 
       - name: Create files for building execution environment
         run: |
-          COLLECTION_FILENAME="$(ls "${{ env.NAMESPACE }}-${{ env.COLLECTION_NAME }}"-*.tar.gz)"
+          COLLECTION_FILENAME="$(ls "${NAMESPACE}-${COLLECTION_NAME}"-*.tar.gz)"
 
           # EE config
           cat > execution-environment.yml <<EOF
diff --git a/.github/workflows/extra-tests.yml b/.github/workflows/extra-tests.yml
index df5f9648..c9478fb8 100644
--- a/.github/workflows/extra-tests.yml
+++ b/.github/workflows/extra-tests.yml
@@ -29,6 +29,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: ansible_collections/${{env.NAMESPACE}}/${{env.COLLECTION_NAME}}
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index 6b3e4933..5bc19ae4 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -26,6 +26,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v5