diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 2823c0a..1a77f28 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -23,6 +23,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
@@ -42,6 +44,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index e5d244a..e5e5143 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -14,6 +14,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
@@ -35,6 +37,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
@@ -60,6 +64,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
@@ -81,6 +87,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
@@ -102,6 +110,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
@@ -123,6 +133,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a1be118..dc5744c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -16,6 +16,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 67ec3b3..1bf4994 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -15,6 +15,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with:
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index f52c9f3..964a7ff 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -17,6 +17,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4.2.0
+      with:
+        persist-credentials: false
     - name: Install Go
       uses: actions/setup-go@v5.1.0
       with: