diff --git a/.github/workflows/_build.yml b/.github/workflows/_build.yml
index 10bf3b1..9b704e0 100644
--- a/.github/workflows/_build.yml
+++ b/.github/workflows/_build.yml
@@ -53,6 +53,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           ref: ${{ inputs.ref || github.event.repository.default_branch }}
+          persist-credentials: false
 
       - name: Docker setup
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1