Do not persist credentials on code checkout (#64)

* chore: do not persist credentials on gh actions

* Add color to lint

.github/workflows/lint_and_format.yml

@@ -11,13 +11,19 @@ jobs:
             security-events: write
         steps:
             - uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+
             - uses: actions/setup-node@v4
+
             - name: Install modules
               run: npm install
+
             - name: Run prettier
               run: npx prettier --check .
+
             - name: Run ESLint
-              run: npx eslint --color -c .eslintrc.json .
+              run: npx eslint --ext ts --color -c .eslintrc.json src
 
             # GH's SARIF viewer does not support suppression directives so we get too many false positives
             # - name: SARIF

.github/workflows/publish.yml

@@ -11,6 +11,8 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
             - uses: actions/setup-node@v4
 
             - name: Install dependencies

package.json

@@ -506,7 +506,7 @@
         "compile": "node ./esbuild.js",
         "package": "NODE_ENV=production node ./esbuild.js",
         "watch": "node ./esbuild.js --watch",
-        "lint": "eslint src --ext ts",
+        "lint": "eslint --ext ts --color -c .eslintrc.json src",
         "prettier": "prettier --write ."
     },
     "devDependencies": {