From 3f1af817317eb8cdf655cc923a2be9f4f9dcefa5 Mon Sep 17 00:00:00 2001
From: Markus Jung <jungm@apache.org>
Date: Mon, 6 Jan 2025 20:10:53 +0100
Subject: [PATCH] disable persisted credentials in actions

---
 .github/workflows/main-pull-request-build.yml | 3 +++
 .github/workflows/main-push-build.yml         | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/main-pull-request-build.yml b/.github/workflows/main-pull-request-build.yml
index 04410c1afa9..c0ed8b978c7 100644
--- a/.github/workflows/main-pull-request-build.yml
+++ b/.github/workflows/main-pull-request-build.yml
@@ -12,6 +12,9 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
+
     - name: Set up JDK 17
       uses: actions/setup-java@v4
       with:
diff --git a/.github/workflows/main-push-build.yml b/.github/workflows/main-push-build.yml
index 2dd12dcd7f3..1f0d9eef7f0 100644
--- a/.github/workflows/main-push-build.yml
+++ b/.github/workflows/main-push-build.yml
@@ -12,6 +12,9 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
+
     - name: Set up JDK 17
       uses: actions/setup-java@v4
       with: