From b09175381c13d8402f2f8b1450655281814dad2e Mon Sep 17 00:00:00 2001
From: Jeff Principe <jepri@microsoft.com>
Date: Fri, 12 Apr 2024 11:28:44 -0700
Subject: [PATCH] ci: avoid persisting credentials on checkout

---
 .github/workflows/ci.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 2ea9214..67edc42 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -73,6 +73,8 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Use Node.js 20
         uses: actions/setup-node@v4
         with: