ci: add persist-credentials: false to checkout step

devin-ai-integration[bot] · aaronsteers · devin-ai-integration[bot] · commit d46b57b1a75d · 2026-07-03T18:28:42.000Z
Co-Authored-By: AJ Steers &lt;aj@airbyte.io&gt;
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -28,6 +28,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
