From eb08dc617a52e1c3e28300ac6cc2de74edfb6146 Mon Sep 17 00:00:00 2001
From: Maarten Aertsen <maarten@nlnetlabs.nl>
Date: Fri, 13 Dec 2024 13:12:03 +0100
Subject: [PATCH] set persist-credentials: false per zizmor suggestion

---
 .github/workflows/analysis_ports.yml | 1 +
 .github/workflows/ci.yml             | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/.github/workflows/analysis_ports.yml b/.github/workflows/analysis_ports.yml
index 0388e3cca..85b723912 100644
--- a/.github/workflows/analysis_ports.yml
+++ b/.github/workflows/analysis_ports.yml
@@ -193,6 +193,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: false
+          persist-credentials: false
       - name: test_windows
         if: ${{ matrix.test_windows == 'yes' }}
         shell: bash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f01ed3273..6ca3bc414 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,6 +13,8 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - name: configure
       run: ./configure --enable-debug
     - name: make