From 71a8a850ae1c656e0cce9bd984892ba399fca39f Mon Sep 17 00:00:00 2001
From: Nicholas Berlin <nicholas.berlin@elastic.co>
Date: Tue, 2 Sep 2025 08:54:54 -0400
Subject: [PATCH] Ensure checkout@v2 does not persist creds

---
 .github/workflows/build.yml              | 2 ++
 .github/workflows/multikernel-tester.yml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c0aee797..b01e7dce 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,6 +26,8 @@ jobs:
     runs-on: ${{ inputs.runner }}
     steps:
       - uses: actions/checkout@v2
+        with:
+          persist-credentials: false
       - name: Configure System
         run: |
           sudo apt-get update -y
diff --git a/.github/workflows/multikernel-tester.yml b/.github/workflows/multikernel-tester.yml
index a24f45e1..e7facdf4 100644
--- a/.github/workflows/multikernel-tester.yml
+++ b/.github/workflows/multikernel-tester.yml
@@ -39,6 +39,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v2
+      with:
+        persist-credentials: false
     - name: Install packages needed for testing
       run: |
         sudo apt-get update