fix: missed some checkouts that are still persisting credentials (#137)

* fix: missed some checkouts that are still persisting credentials

Signed-off-by: jmeridth <jmeridth@gmail.com>

Author: jmeridth

.github/workflows/codeql.yml

@@ -58,6 +58,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v5
+      with:
+        persist-credentials: false
 
     # Add any setup steps before running the `github/codeql-action/init` action.
     # This includes steps like installing compilers or runtimes (`actions/setup-node`

.github/workflows/release.yml

@@ -26,6 +26,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Set up Go
         uses: actions/setup-go@v5
         with:

evaluation_plans/osps/build_release/steps_test.go

@@ -20,7 +20,9 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Pull the pvtr-github-repo image
         run: docker pull eddieknight/pvtr-github-repo:latest
@@ -46,7 +48,9 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Pull the pvtr-github-repo image
         run: docker pull eddieknight/pvtr-github-repo:latest