ci: persist credentials by default disabled

Author: damienwebdev

.github/workflows/build.yml

@@ -42,6 +42,7 @@ jobs:
         with:
           fetch-depth: 1
           ref: ${{ inputs.ref && inputs.ref || github.sha }}
+          persist-credentials: false
 
       - uses: graycoreio/daffodil/.github/actions/setup-nx-remote-cache@develop
         with:
@@ -68,6 +69,7 @@ jobs:
         with:
           fetch-depth: 1
           ref: ${{ inputs.ref && inputs.ref || github.sha }}
+          persist-credentials: false
 
       - uses: graycoreio/github-actions/setup-node@main
         with:
@@ -103,6 +105,7 @@ jobs:
         with:
           ref: ${{ inputs.ref && inputs.ref || github.sha }}
           fetch-depth: 0
+          persist-credentials: false
       - uses: graycoreio/github-actions/setup-node@main
         with:
           node-version: '22.21.x'
@@ -135,6 +138,7 @@ jobs:
         with:
           fetch-depth: 1
           ref: ${{ inputs.ref && inputs.ref || github.sha }}
+          persist-credentials: false
 
       - uses: graycoreio/daffodil/.github/actions/setup-nx-remote-cache@develop
         with:

.github/workflows/deprecation.yml

@@ -19,6 +19,7 @@ jobs:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - uses: graycoreio/github-actions/setup-node@main
         with:

.github/workflows/publish.yml

@@ -30,6 +30,7 @@ jobs:
         with:
           ref: ${{ github.event.workflow_run.head_sha || github.ref }}
           fetch-depth: 1
+          persist-credentials: false
 
       - uses: graycoreio/github-actions/setup-node@main
         with:

.github/workflows/test-commerce-schematic.yml

@@ -40,6 +40,7 @@ jobs:
         with:
           fetch-depth: 100
           ref: ${{ inputs.ref && inputs.ref || github.sha }}
+          persist-credentials: false
 
       - name: Get Angular version from package.json
         id: package-angular-version
@@ -93,6 +94,7 @@ jobs:
         with:
           fetch-depth: 1
           ref: ${{ inputs.ref && inputs.ref || github.sha }}
+          persist-credentials: false
 
       - uses: graycoreio/github-actions/setup-node@main
         with:

.github/workflows/upload-search-index.yml

@@ -19,6 +19,7 @@ jobs:
         with:
           fetch-depth: 1
           ref: ${{ github.event_name == 'push' && github.event.ref || github.sha }}
+          persist-credentials: false
 
       - uses: graycoreio/daffodil/.github/actions/setup-nx-remote-cache@develop
         with: