fix

Author: lucasssvaz

.github/workflows/build_tests.yml

@@ -58,18 +58,14 @@ jobs:
             /*
             !.github
 
-      - name: Get Scripts
+      # To avoid giving unknown scripts elevated permissions, download them from the master branch
+      - name: Get CI scripts from master
         if: ${{ steps.check-build.outputs.enabled == 'true' }}
         run: |
           mkdir -p .github
           cd .github
           curl https://codeload.github.com/${{ github.repository }}/tar.gz/master | tar -xz --strip=2 arduino-esp32-master/.github
 
-      - name: Cat scripts
-        if: ${{ steps.check-build.outputs.enabled == 'true' }}
-        run: |
-          cat .github/scripts/tests_build.sh
-
       - name: Get libs cache
         uses: actions/cache@v4
         if: ${{ steps.check-build.outputs.enabled == 'true' }}

.github/workflows/hw.yml

@@ -60,13 +60,13 @@ jobs:
             /*
             !.github
 
-      - name: Checkout Scripts
+      # To avoid giving unknown scripts elevated permissions, download them from the master branch
+      - name: Get CI scripts from master
         if: ${{ steps.check-tests.outputs.enabled == 'true' }}
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-          sparse-checkout-cone-mode: false
-          sparse-checkout: .github/*
+        run: |
+          mkdir -p .github
+          cd .github
+          curl https://codeload.github.com/${{ github.repository }}/tar.gz/master | tar -xz --strip=2 arduino-esp32-master/.github
 
       # setup-python currently only works on ubuntu images
       # - uses: actions/setup-python@v5

.github/workflows/qemu.yml

@@ -56,13 +56,13 @@ jobs:
             /*
             !.github
 
-      - name: Checkout Scripts
+      # To avoid giving unknown scripts elevated permissions, download them from the master branch
+      - name: Get CI scripts from master
         if: ${{ steps.check-tests.outputs.enabled == 'true' }}
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-          sparse-checkout-cone-mode: false
-          sparse-checkout: .github/*
+        run: |
+          mkdir -p .github
+          cd .github
+          curl https://codeload.github.com/${{ github.repository }}/tar.gz/master | tar -xz --strip=2 arduino-esp32-master/.github
 
       - uses: actions/setup-python@v5
         if: steps.check-tests.outputs.enabled == 'true'

.github/workflows/wokwi.yml

@@ -64,13 +64,13 @@ jobs:
             /*
             !.github
 
-      - name: Checkout Scripts
+      # To avoid giving unknown scripts elevated permissions, download them from the master branch
+      - name: Get CI scripts from master
         if: ${{ steps.check-tests.outputs.enabled == 'true' }}
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-          sparse-checkout-cone-mode: false
-          sparse-checkout: .github/*
+        run: |
+          mkdir -p .github
+          cd .github
+          curl https://codeload.github.com/${{ github.repository }}/tar.gz/master | tar -xz --strip=2 arduino-esp32-master/.github
 
       - uses: actions/setup-python@v5
         if: steps.check-tests.outputs.enabled == 'true'