[CI] Set persist-credentials: false for actions/checkout steps

Author: jbampton

.github/workflows/build.yml

@@ -31,6 +31,8 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Set up JDK 17
         uses: actions/setup-java@v5

.github/workflows/ci.yml

@@ -219,6 +219,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up JDK 17
         uses: actions/setup-java@v5

.github/workflows/codecov.yml

@@ -35,6 +35,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up JDK 17
         uses: actions/setup-java@v5

.github/workflows/codeql-analysis.yml

@@ -36,6 +36,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:

.github/workflows/docker-cloudstack-simulator.yml

@@ -48,6 +48,8 @@ jobs:
         run: echo "DOCKER_REPOSITORY=apache" >> $GITHUB_ENV
 
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Set ACS version
         run: echo "ACS_VERSION=$(grep '<version>' pom.xml | head -2 | tail -1 | cut -d'>' -f2 |cut -d'<' -f1)" >> $GITHUB_ENV

.github/workflows/main-sonar-check.yml

@@ -35,7 +35,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
-
+          persist-credentials: false
       - name: Set up JDK17
         uses: actions/setup-java@v5
         with:

.github/workflows/pre-commit.yml

@@ -33,6 +33,8 @@ jobs:
     steps:
       - name: Check Out
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
       - name: Install
         run: |
           python -m pip install --upgrade pip

.github/workflows/rat.yml

@@ -31,6 +31,8 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
       - name: Set up JDK 17
         uses: actions/setup-java@v5
         with:

.github/workflows/sonar-check.yml

@@ -37,7 +37,7 @@ jobs:
         with:
           ref: "refs/pull/${{ github.event.number }}/merge"
           fetch-depth: 0
-
+          persist-credentials: false
       - name: Set up JDK17
         uses: actions/setup-java@v5
         with:

.github/workflows/ui.yml

@@ -32,6 +32,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Set up Node
         uses: actions/setup-node@v5