From 2ec174ffb7d9b738e946d8c8fec395d515d2d783 Mon Sep 17 00:00:00 2001
From: Carlo Cabrera <30379873+carlocab@users.noreply.github.com>
Date: Wed, 30 Oct 2024 22:29:01 +0800
Subject: [PATCH] workflows: fix `artipacked` warning

Fixes https://github.com/Homebrew/brew/security/code-scanning/32
Fixes https://github.com/Homebrew/brew/security/code-scanning/33
Fixes https://github.com/Homebrew/brew/security/code-scanning/42
---
 .github/workflows/codeql-analysis.yml | 2 ++
 .github/workflows/docs.yml            | 2 ++
 .github/workflows/rubydoc.yml         | 1 +
 3 files changed, 5 insertions(+)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 93e5008adb21d..333ba2a0f0de9 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -24,6 +24,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 8cfdd90698b5c..c134c18c08950 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -35,6 +35,8 @@ jobs:
 
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Install vale
         run: brew install vale
diff --git a/.github/workflows/rubydoc.yml b/.github/workflows/rubydoc.yml
index ba7dd6f12f3ec..45da1fd4dab8c 100644
--- a/.github/workflows/rubydoc.yml
+++ b/.github/workflows/rubydoc.yml
@@ -40,6 +40,7 @@ jobs:
         with:
           repository: Homebrew/rubydoc.brew.sh
           path: rubydoc
+          persist-credentials: false
 
       - name: Install Ruby
         uses: ruby/setup-ruby@7bae1d00b5db9166f4f0fc47985a3a5702cb58f0 # v1.197.0