diff --git a/.github/workflows/docker-images.yml b/.github/workflows/docker-images.yml
index da2ec6ee..28f506c8 100644
--- a/.github/workflows/docker-images.yml
+++ b/.github/workflows/docker-images.yml
@@ -46,6 +46,8 @@ jobs:
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/ee.yml b/.github/workflows/ee.yml
index fd9c7cc6..f8ca6c44 100644
--- a/.github/workflows/ee.yml
+++ b/.github/workflows/ee.yml
@@ -63,6 +63,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: ansible_collections/${{ env.NAMESPACE }}/${{ env.COLLECTION_NAME }}
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -96,7 +97,7 @@ jobs:
 
       - name: Create files for building execution environment
         run: |
-          COLLECTION_FILENAME="$(ls "${{ env.NAMESPACE }}-${{ env.COLLECTION_NAME }}"-*.tar.gz)"
+          COLLECTION_FILENAME="$(ls "${NAMESPACE}-${COLLECTION_NAME}"-*.tar.gz)"
 
           # EE config
           cat > execution-environment.yml <<EOF
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index 5c63ae09..34097acc 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -26,6 +26,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v5