set persist-credentials: false per zizmor suggestion

diff --git a/.github/workflows/analysis_ports.yml b/.github/workflows/analysis_ports.yml
index 0388e3cca80ce8c1706622353c4aef3879da3ab1..85b7239129686de1ac163da4cdf0548dae45e120 100644 (file)
--- a/.github/workflows/analysis_ports.yml
+++ b/.github/workflows/analysis_ports.yml
@@ -193,6 +193,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: false
+          persist-credentials: false
       - name: test_windows
         if: ${{ matrix.test_windows == 'yes' }}
         shell: bash

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f01ed327351b5b9a589404a75765a46bd135c925..6ca3bc414c3d1ec899cf3e6627fe9011d94a88c9 100644 (file)
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,6 +13,8 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - name: configure
       run: ./configure --enable-debug
     - name: make