Merge pull request #1270 from PHPCSStandards/feature/ghactions-do-not-persist-credentials

GH Actions: do not persist credentials

Author: jrfnl

.github/workflows/publish-website.yml

@@ -47,6 +47,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           ref: ${{ steps.base_branch.outputs.BRANCH }}
+          persist-credentials: false
 
       - name: Install PHP
         uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # 2.35.4