Merge pull request #89 from rubygems/use-persist-credentials-false-with-actions-checkout

Opt out of persisting credentials

Author: landongrindheim

.github/workflows/push_gem.yml

@@ -25,6 +25,8 @@ jobs:
           egress-policy: audit
 
       - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        with:
+          persist-credentials: false
       - name: Set up Ruby
         uses: ruby/setup-ruby@cacc9f1c0b3f4eb8a16a6bb0ed10897b43b9de49 # v1.176.0
         with:

.github/workflows/ubuntu.yml

@@ -16,6 +16,8 @@ jobs:
         ruby: [ 3.1, 3.2, 3.3, 3.4, head ]
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup ruby
         uses: ruby/setup-ruby@v1
         with: