update

Author: cpanato

.github/workflows/.build.yaml

@@ -21,14 +21,16 @@ jobs:
           egress-policy: audit
 
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
 
       - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
           terraform_version: '1.10.*'
           terraform_wrapper: false
 
       # Setup local registry
-      - uses: chainguard-dev/actions/setup-registry@7d40b853210d271a28ac2822827f965f6f1e78fa # main
+      - uses: chainguard-dev/actions/setup-registry@ec48ea414c0cb207549029d8fe35f8f01e563219 # v1.0.8
         if: inputs.registry == ''
         with:
           port: 5000

.github/workflows/presubmit-build.yaml

@@ -1,5 +1,7 @@
 on:
   pull_request:
+    branches:
+      - 'main'
 
 permissions:
   contents: read # Needed to clone the repo