fix: checkout with persist-credentials: false

.github/workflows/docker-build-cloud.yml

@@ -51,6 +51,8 @@ jobs:
     steps:
       - name: Checkout Repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
 
       # Login MUST run before Set up Docker Buildx so the cloud driver can
       # authenticate to the Docker Build Cloud endpoint via ~/.docker/config.json.

.github/workflows/docker-build.yml

@@ -118,6 +118,8 @@ jobs:
 
       - name: Checkout Repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
 
       - name: Download build artifact
         if: ${{ inputs.artifact-name != '' }}

.github/workflows/docker-promote.yml

@@ -63,6 +63,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Check the tag and the project version agree
         id: check

.github/workflows/java-build.yml

@@ -72,6 +72,7 @@ jobs:
           # Sonar needs the full history to attribute lines to authors, and the Gradle
           # build derives the project version from the tag pointing at HEAD.
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up JDK
         uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1

.github/workflows/propose-safe-multisig-tx.yml

@@ -53,6 +53,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
+          persist-credentials: false
           repository: iExecBlockchainComputing/github-actions-workflows
 
       - name: Setup Node.js

.github/workflows/publish-npm.yml

@@ -101,6 +101,8 @@ jobs:
           path: ${{ inputs.artifact-path }}
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:

.github/workflows/rust-build.yml

@@ -33,6 +33,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # @master 2026-09-12 (action has no version tags)

docker-build-cloud/workflow-sha256

@@ -1 +1 @@
-43e170deab62e55ddba84fe208e8a0370f7ea1f3fd1cd8447c66836b7f926cbd
+988d890cdfffa6499cf4793ee140f9ff19467560c60acdf133b505122fc76bde

docker-build/workflow-sha256

@@ -1 +1 @@
-25895c20dacd914da70625a96d8be611b257dffdce92c349a561461988d1e29f
+eda9395589dd24e9b931f836a515d6733a82df11438abc850ae0220d9c49fc9e

docker-promote/workflow-sha256

@@ -1 +1 @@
-bae0d1c5a9f086031b7e33d60555788f3827e68ff87cbb68ba89b9c2f5e9482c
+cce84d081be3cd55c0c579a07ec148b9e859dac04192b282dccd9ca2aeb14af5

java-build/workflow-sha256

@@ -1 +1 @@
-7613d95bab42ba3dee3574df0bf3e43059b96720aedb0f5560d3f4b7e92e2aed
+b489f04732126520d4ed0ff1f3153c5d92b016cdc52658476a40b996517c0006

propose-safe-multisig-tx/workflow-sha256

@@ -1 +1 @@
-fd5f2c5b52e9fba44a86fe2b8f0b5e38fe04bf464ca4ac8a65f3d850f53a9426
+e4cfab6457a672097572fcd054d6db1109871779c33ce1e7649cb8265527a948

publish-npm/workflow-sha256

@@ -1 +1 @@
-07eaef487e580e8c16e82a532f0b271b645bb733c1c3fc37899dedfab9936c13
+a0f982d67bdbbede205a42f52391604ce973c8c2b83598c2f4a12b8673bcc4ba

rust-build/workflow-sha256

@@ -1 +1 @@
-64dfabf72bbdfb5babe8ace19240ef5f799531950a4de7962f615837fe2176a5
+d7dda2c72a42adb7818175d14d51fafbe7c2d53ec73119bbacd14ebfab36db60