mraba/gh-actions-update: set persist-credentials to false in checkout…

… actions

.github/workflows/changelog.yml

@@ -14,6 +14,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@v4
  with:
+ persist-credentials: false
  fetch-depth: 0
 
  - name: Ensure DESCRIPTION.md is updated

.github/workflows/create_req_files.yml

@@ -12,6 +12,8 @@ jobs:
  python-version: ["3.7", "3.8", "3.9", "3.10", "3.11"]
  steps:
  - uses: actions/checkout@v4
+ with:
+ persist-credentials: false
  - name: Set up Python
  uses: actions/setup-python@v5
  with:
@@ -48,6 +50,7 @@ jobs:
  steps:
  - uses: actions/checkout@v4
  with:
+ persist-credentials: false
  token: ${{ secrets.SNOWFLAKE_GITHUB_TOKEN }} # stored in GitHub secrets
  - name: Download requirement files
  uses: actions/download-artifact@v4

.github/workflows/jira_close.yml

@@ -11,6 +11,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@v4
  with:
+ persist-credentials: false
  repository: snowflakedb/gh-actions
  ref: jira_v1
  token: ${{ secrets.SNOWFLAKE_GITHUB_TOKEN }} # stored in GitHub secrets

.github/workflows/jira_issue.yml

@@ -16,6 +16,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@v4
  with:
+ persist-credentials: false
  repository: snowflakedb/gh-actions
  ref: jira_v1
  token: ${{ secrets.SNOWFLAKE_GITHUB_TOKEN }} # stored in GitHub secrets

.github/workflows/python-publish.yml

@@ -22,6 +22,8 @@ jobs:
 
  steps:
  - uses: actions/checkout@v4
+ with:
+ persist-credentials: false
  - name: Set up Python
  uses: actions/setup-python@v5
  with:

.github/workflows/snyk-issue.yml

@@ -18,6 +18,7 @@ jobs:
  - name: Checkout Action
  uses: actions/checkout@v4
  with:
+ persist-credentials: false
  repository: snowflakedb/whitesource-actions
  token: ${{ secrets.whitesource_action_token }}
  path: whitesource-actions

.github/workflows/snyk-pr.yml

@@ -17,12 +17,14 @@ jobs:
  - name: Checkout
  uses: actions/checkout@v4
  with:
+ persist-credentials: false
  ref: ${{ github.event.pull_request.head.ref }}
  fetch-depth: 0
 
  - name: Checkout Action
  uses: actions/checkout@v4
  with:
+ persist-credentials: false
  repository: snowflakedb/whitesource-actions
  token: ${{ secrets.whitesource_action_token }}
  path: whitesource-actions