Set persist-credentials to false

Author: vishesh92

.github/workflows/build.yml

@@ -29,6 +29,8 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Setup Environment
         uses: ./.github/actions/setup-env

.github/workflows/ci.yml

@@ -32,6 +32,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Setup Environment
         uses: ./.github/actions/setup-env
         with:
@@ -253,6 +254,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Setup Environment
         uses: ./.github/actions/setup-env
         with:

.github/workflows/codeql-analysis.yml

@@ -36,6 +36,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
+        with:
+          persist-credentials: false
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
         with:

.github/workflows/daily-repo-status.lock.yml

@@ -48,6 +48,8 @@ jobs:
         run: echo "DOCKER_REPOSITORY=apache" >> $GITHUB_ENV
 
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Set ACS version
         run: echo "ACS_VERSION=$(grep '<version>' pom.xml | head -2 | tail -1 | cut -d'>' -f2 |cut -d'<' -f1)" >> $GITHUB_ENV

.github/workflows/docker-cloudstack-simulator.yml

@@ -34,6 +34,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Setup Environment
         uses: ./.github/actions/setup-env
         with:

.github/workflows/main-sonar-check.yml

@@ -33,6 +33,8 @@ jobs:
     steps:
       - name: Check Out
         uses: actions/checkout@v6
+        with:
+          persist-credentials: false
       - name: Set up Python
         uses: actions/setup-python@v6
         with:

.github/workflows/pre-commit.yml

@@ -29,6 +29,8 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
       - name: Setup Environment
         uses: ./.github/actions/setup-env
       - name: Install Non-OSS

.github/workflows/rat.yml

@@ -32,6 +32,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Setup Environment
         uses: ./.github/actions/setup-env
         with:

.github/workflows/sonar-check.yml

@@ -32,6 +32,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Set up Node
         uses: actions/setup-node@v6