From d0cf869ff8b95fe4148589f057432f57b12d86fd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marcel=20Kr=C3=A4ml?= <m.kraeml@shopware.com>
Date: Wed, 3 Jun 2026 10:16:01 +0200
Subject: [PATCH] fix: don't persist credentials on extension clone

---
 setup-extension/action.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/setup-extension/action.yml b/setup-extension/action.yml
index 27398eb..6f327eb 100644
--- a/setup-extension/action.yml
+++ b/setup-extension/action.yml
@@ -146,6 +146,7 @@ runs:
       if: ${{ ! inputs.extension-zip }}
       uses: actions/checkout@v6
       with:
+        persist-credentials: false
         ref: ${{ inputs.extensionRef || github.ref }}
         path: custom/plugins/${{ inputs.extensionName }}
         submodules: ${{ inputs.with-submodules == 'false' && false || 'recursive'  }}