ci: disable persist-credentials on checkout actions

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

Author: thaJeztah

.github/workflows/check.yml

@@ -30,6 +30,8 @@ jobs:
           - 1.26
     steps:
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
       - name: install Go
         uses: actions/setup-go@v6
         with:
@@ -56,6 +58,7 @@ jobs:
         with:
           path: src/github.com/containerd/accelerated-container-image
           fetch-depth: 100
+          persist-credentials: false
 
       - name: set env
         shell: bash

.github/workflows/ci-build-image.yml

@@ -38,6 +38,7 @@ jobs:
         with:
           ref: ${{ inputs.commit-hash }}
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Buildx
         uses: docker/setup-buildx-action@v2

.github/workflows/ci-unit-test.yml

@@ -30,6 +30,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 100
+          persist-credentials: false
 
       - name: install Go
         uses: actions/setup-go@v6

.github/workflows/ci-userspace-convertor.yml

@@ -51,6 +51,7 @@ jobs:
         with:
           ref: ${{ inputs.commit-hash }}
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Start OverlayBD
         working-directory: /app

.github/workflows/codeql.yml

@@ -30,6 +30,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v6
+      with:
+        persist-credentials: false
 
     - uses: actions/setup-go@v6
       with:

.github/workflows/release.yml

@@ -32,6 +32,7 @@ jobs:
       uses: actions/checkout@v6
       with:
         fetch-depth: 100
+        persist-credentials: false
     - name: Setup buildx instance
       uses: docker/setup-buildx-action@v2
       with: