diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml
index 7436a068..a1bb5195 100644
--- a/.github/workflows/packaging.yml
+++ b/.github/workflows/packaging.yml
@@ -20,7 +20,7 @@ jobs:
     name: Package and push from PR
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
            persist-credentials: false
       - uses: cloudve/helm-ci@master
@@ -36,7 +36,7 @@ jobs:
     name: Package and push manual invocation
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
            persist-credentials: false
       - uses: cloudve/helm-ci@master
@@ -56,6 +56,9 @@ jobs:
       && contains(needs.*.result, 'success')
       && !contains(needs.*.result, 'failure')
     steps:
+      - uses: actions/checkout@v4
+        with:
+           persist-credentials: false
       - name: Tag and release
         run: |
           version=v$(cat galaxy/Chart.yaml | grep ^version: | awk '{print $2}')