From cd8e454af4db0f7fe0d9698bdaf2c621ef135490 Mon Sep 17 00:00:00 2001
From: Harvey Tseng <harveytseng2@gmail.com>
Date: Sun, 6 Sep 2026 20:49:00 -0400
Subject: [PATCH] ci: disable credential persistence in CI checkout

---
 .github/workflows/ci.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9d944af..cae319f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,6 +33,8 @@ jobs:
       cancel-in-progress: true
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
       - uses: Verdenroz/soothfast@80b18d8831521646b65fec79c6df14d6f763c602 # v0.3.1