Apply zizmor auto fixes to action config

Author: tpoliaw

.github/workflows/ci.yml

@@ -14,6 +14,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - uses: dtolnay/rust-toolchain@stable
       with:
           toolchain: nightly
@@ -28,6 +30,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - uses: dtolnay/rust-toolchain@stable
       with:
           toolchain: stable
@@ -44,6 +48,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - uses: dtolnay/rust-toolchain@stable
       with:
           toolchain: stable
@@ -60,6 +66,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
     - uses: dtolnay/rust-toolchain@stable
       with:
           toolchain: stable

.github/workflows/publish.yaml

@@ -17,6 +17,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -31,7 +33,9 @@ jobs:
 
       - name: Set application version
         if: ${{ github.ref_type == 'tag' }}
-        run: sed -i 's/^version = ".*"$/version = "${{ steps.meta.outputs.version }}"/' Cargo.toml
+        run: sed -i 's/^version = ".*"$/version = "${STEPS_META_OUTPUTS_VERSION}"/' Cargo.toml
+        env:
+          STEPS_META_OUTPUTS_VERSION: ${{ steps.meta.outputs.version }}
 
       - name: Login to GHCR
         uses: docker/login-action@v3
@@ -76,5 +80,7 @@ jobs:
         if: ${{ github.event_name == 'push' && github.ref_type == 'tag' }}
         run: |
           helm dependencies update helm/numtracker
-          helm package helm/numtracker --version ${{ steps.meta.outputs.version }} --app-version ${{ steps.meta.outputs.version }} -d /tmp/
-          helm push /tmp/numtracker-${{ steps.meta.outputs.version }}.tgz oci://ghcr.io/diamondlightsource/charts
+          helm package helm/numtracker --version ${STEPS_META_OUTPUTS_VERSION} --app-version ${STEPS_META_OUTPUTS_VERSION} -d /tmp/
+          helm push /tmp/numtracker-${STEPS_META_OUTPUTS_VERSION}.tgz oci://ghcr.io/diamondlightsource/charts
+        env:
+          STEPS_META_OUTPUTS_VERSION: ${{ steps.meta.outputs.version }}