From cd5da49adc2e1cc81de5990f07a7f4abed764ca2 Mon Sep 17 00:00:00 2001
From: Carlo Cabrera <30379873+carlocab@users.noreply.github.com>
Date: Wed, 30 Oct 2024 10:58:05 +0800
Subject: [PATCH] workflows/tests: set `persist-credentials: false`

Fixes https://github.com/Homebrew/homebrew-core/security/code-scanning/34
---
 .github/workflows/tests.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 8a34d913ee31..36952d541da4 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -145,6 +145,8 @@ jobs:
       test-bot-dependents-args: ${{ steps.check-labels.outputs.test-bot-dependents-args }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Check for CI labels
         id: check-labels
@@ -259,6 +261,8 @@ jobs:
       test-bot-dependents-args: ${{ steps.check-labels.outputs.test-bot-dependents-args }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Check for CI labels
         id: check-labels