ci: tighten security of checkout action

Author: foosel

.github/workflows/add-package.yml

@@ -20,9 +20,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           path: checkout
+          persist-credentials: false
 
       - name: Fetch package
         id: fetch

.github/workflows/build-pages.yml

@@ -19,7 +19,9 @@ jobs:
 
     steps:
       - name: ⬇ Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: 🔑 Configure GPG key
         run: |

.github/workflows/check-for-new-camera-streamer-package.yml

@@ -75,7 +75,9 @@ jobs:
             core.exportVariable("PACKAGE_URLS", packageUrls.join(" "));
 
       - name: ⬇ Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: 🤔 Check if package is already in repo
         id: check-package-exists