ci: set persist-credentials to false

Author: danielroe

.github/workflows/autofix.yml

@@ -14,6 +14,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
 
       - run: npm i -g --force corepack && corepack enable
 

.github/workflows/bench.yml

@@ -21,6 +21,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - run: npm i -g --force corepack && corepack enable
 

.github/workflows/size-comment.yml

@@ -23,6 +23,7 @@ jobs:
         with:
           sparse-checkout: scripts/parse-sizes.ts
           sparse-checkout-cone-mode: false
+          persist-credentials: false
 
       - name: ⏬ Download artifacts from workflow run
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8