From f0c7201af6032e0b7ee2c866d6aa10288822098b Mon Sep 17 00:00:00 2001
From: Bryan Florkiewicz <bflorkie@redhat.com>
Date: Thu, 21 Nov 2024 20:14:32 -0500
Subject: [PATCH] chore: do not persist gh creds on release checkout

---
 .github/workflows/ci.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 50336089a..2a04ddd23 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -127,6 +127,7 @@ jobs:
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_BOT_TOKEN }}
+          persist-credentials: false
       - uses: './.github/actions/release'
         with:
           gh_token: ${{ secrets.GH_BOT_TOKEN }}