From 361ed7d67b3ca83e178cfea902782b7503fd9720 Mon Sep 17 00:00:00 2001
From: m1rm <mail@miriam-mueller.com>
Date: Wed, 20 May 2026 11:03:38 +0200
Subject: [PATCH] security: harden checkout action

---
 .github/workflows/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 45b303c5..4335efc4 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -11,6 +11,7 @@ jobs:
     - uses: actions/checkout@v6
       with:
         submodules: recursive
+        persist-credentials: false
     - name: Set up Python 3.14
       uses: actions/setup-python@v5
       with: