workflow: optimize

.github/workflows/checksums.yml

@@ -4,8 +4,6 @@ on:
     branches:
       - main
   pull_request:
-permissions:
-  contents: write
 jobs:
   checksums:
     runs-on: cn
@@ -15,11 +13,11 @@ jobs:
           set -e
           git config --global credential.helper store
           echo "https://ci:${{ secrets.CI_PASSWORD }}@git.haozi.net" > ~/.git-credentials
-          git clone --depth 1 ${{ github.server_url }}/${{ github.repository }}.git /tmp/repo
-          cd /tmp/repo
+          git clone --depth 1 ${{ github.server_url }}/${{ github.repository }}.git ${{ github.workspace }}/repo
+          cd ${{ github.workspace }}/repo
           git checkout ${{ github.ref_name }}
-          git config lfs.${{ github.server_url }}/${{ github.repository }}.git/info/lfs.locksverify true
           git lfs install --local
+          git config lfs.${{ github.server_url }}/${{ github.repository }}.git/info/lfs.locksverify true
           git lfs pull
           IFS=$'\n'
           for file in $(git ls-files | grep "^panel/" | grep -v ".sha256$" | grep -v ".txt$"); do