diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e273e43ca1..a8ea6ec34a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,6 +23,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -32,6 +34,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - run: sudo apt-get install shellcheck
       - run: git ls-files '*.sh' | xargs shellcheck
 
@@ -58,6 +62,8 @@ jobs:
       SKIP_MIGRATION: 1
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
         with:
           node-version: ${{ matrix.node }}
@@ -98,6 +104,8 @@ jobs:
       SKIP_MIGRATION: 1
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -135,6 +143,8 @@ jobs:
       ADAPTERS: ${{ matrix.adapter }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
         with:
           node-version: ${{ matrix.node }}
@@ -172,6 +182,8 @@ jobs:
       ADAPTERS: ${{ matrix.adapter }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -209,6 +221,8 @@ jobs:
       SERVER: pouchdb-server
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
         with:
           node-version: ${{ env.NODE_VERSION }}
@@ -245,6 +259,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
         with:
           node-version: ${{ matrix.node }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index e9ec4c1a8f..46961e9bad 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -20,6 +20,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/install-deps
       - uses: ruby/setup-ruby@v1
         with: