diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index bd03c35d56..040dbfe09d 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -25,6 +25,9 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
+        persist-credentials: false
 
     - name: Install dependencies
       uses: ./.github/actions/install-dependencies