diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index e574090a5..4ab67d7f6 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -25,7 +25,6 @@ jobs:
     - uses: actions/checkout@v3
       with:
           submodules: true
-          persist-credentials: true
     - name: install govulncheck
       run: go install -v golang.org/x/vuln/cmd/govulncheck@v1.0.4
     - name: govuln sec scan
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bf73cf576..7c8532f44 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -98,14 +98,12 @@ jobs:
         if: github.event_name == 'issue_comment'
         with:
           submodules: true
-          persist-credentials: true
           token: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ steps.pr_data.outputs.ref }}
       - name: Normal check out code
         uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
         if: github.event_name == 'push' || github.event_name == 'pull_request' 
       - id: changed-files
         uses: tj-actions/changed-files@v41
@@ -153,8 +151,6 @@ jobs:
       security-events: write
     steps:
       - uses: actions/checkout@v3
-        with:
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           nix_path: nixpkgs=channel:nixos-22.11
@@ -221,7 +217,6 @@ jobs:
         if: github.event_name == 'issue_comment'
         with:
           submodules: true
-          persist-credentials: true
           token: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ needs.build.outputs.ref }}
       - name: Normal check out code
@@ -229,7 +224,6 @@ jobs:
         if: github.event_name == 'push' || github.event_name == 'pull_request' 
         with:
           submodules: true
-          persist-credentials: true
       - id: changed-files
         uses: tj-actions/changed-files@v41
         with:
@@ -269,7 +263,6 @@ jobs:
         if: github.event_name == 'issue_comment'
         with:
           submodules: true
-          persist-credentials: true
           token: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ needs.build.outputs.ref }}
       - name: Normal check out code
@@ -277,7 +270,6 @@ jobs:
         if: github.event_name == 'push' || github.event_name == 'pull_request' 
         with:
           submodules: true
-          persist-credentials: true
       - id: changed-files
         uses: tj-actions/changed-files@v41
         with:
@@ -317,7 +309,6 @@ jobs:
         if: github.event_name == 'issue_comment'
         with:
           submodules: true
-          persist-credentials: true
           token: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ needs.build.outputs.ref }}
       - name: Normal check out code
@@ -325,7 +316,6 @@ jobs:
         if: github.event_name == 'push' || github.event_name == 'pull_request' 
         with:
           submodules: true
-          persist-credentials: true
       - id: changed-files
         uses: tj-actions/changed-files@v41
         with:
@@ -422,8 +412,6 @@ jobs:
     if: github.event_name == 'push' || github.event_name == 'pull_request'
     steps:
       - uses: actions/checkout@v3
-        with:
-          persist-credentials: true
       - id: changed-files
         uses: tj-actions/changed-files@v41
         with:
diff --git a/.github/workflows/buildwin.yml b/.github/workflows/buildwin.yml
index 097ae6d49..79f0d0bc6 100644
--- a/.github/workflows/buildwin.yml
+++ b/.github/workflows/buildwin.yml
@@ -25,7 +25,6 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - name: Set GOBIN
         run: |
           echo "$(go env GOPATH)/bin" >> $GITHUB_PATH
diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index 9de5c1fd6..d1321c1c3 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -23,7 +23,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - id: changed-files
         uses: tj-actions/changed-files@v41
         with:
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 535ca0ecb..aa2a93bda 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -47,8 +47,6 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
-        with:
-          persist-credentials: true
       - uses: actions/setup-go@v3
         with:
           go-version: 1.22
diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml
index 8853edc3b..199e2660e 100644
--- a/.github/workflows/gosec.yml
+++ b/.github/workflows/gosec.yml
@@ -22,8 +22,6 @@ jobs:
       GO111MODULE: on
     steps:
       - uses: actions/checkout@v3
-        with:
-          persist-credentials: true
       - id: changed-files
         uses: tj-actions/changed-files@v41
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 83c1b3fcd..2d083dd59 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -23,7 +23,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - id: changed-files
         uses: tj-actions/changed-files@v41
         with:
diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index f09f3569b..ec8247bc2 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -23,7 +23,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -41,7 +40,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -85,7 +83,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -107,7 +104,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -143,7 +139,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -179,7 +174,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -215,7 +209,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -251,7 +244,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -287,7 +279,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -323,7 +314,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
@@ -360,7 +350,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           extra_nix_config: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 270feda69..341221022 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,8 +14,6 @@ jobs:
     environment: release
     steps:
       - uses: actions/checkout@v3
-        with:
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           nix_path: nixpkgs=channel:nixos-22.11
@@ -59,8 +57,6 @@ jobs:
     environment: release
     steps:
       - uses: actions/checkout@v3
-        with:
-          persist-credentials: true
       - uses: cachix/install-nix-action@v23
         with:
           nix_path: nixpkgs=channel:nixos-22.11
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index ec68680ad..c04ec28a0 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -24,7 +24,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: true
-          persist-credentials: true
       # Run the "semgrep ci" command on the command line of the docker image.
       - run: semgrep ci
         env:
diff --git a/.github/workflows/staticmajor.yml b/.github/workflows/staticmajor.yml
index bacd5bdc2..167fbf296 100644
--- a/.github/workflows/staticmajor.yml
+++ b/.github/workflows/staticmajor.yml
@@ -14,8 +14,6 @@ jobs:
     steps:
       - name: Check out repository code
         uses: actions/checkout@v3
-        with:
-          persist-credentials: true
       - name: Staticmajor action
         id: staticmajor
         uses: orijtech/staticmajor-action@main