From 9abbbfb34e6ba5232abe6aaa07d7f2e7d2c30bfb Mon Sep 17 00:00:00 2001
From: Claas Augner <caugner@mozilla.com>
Date: Wed, 8 Oct 2025 12:11:39 +0200
Subject: [PATCH] ci(workflows): disable `actions/checkout` credential
 persistance

---
 .github/workflows/_build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/_build.yml b/.github/workflows/_build.yml
index 10bf3b1..9b704e0 100644
--- a/.github/workflows/_build.yml
+++ b/.github/workflows/_build.yml
@@ -53,6 +53,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           ref: ${{ inputs.ref || github.event.repository.default_branch }}
+          persist-credentials: false
 
       - name: Docker setup
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1