Merge pull request #233 from rubygems/use-persist-credentials-false-for-actions-checkout

Prevent persisting credentials via `actions/checkout`

Author: landongrindheim

.github/workflows/build.yml

@@ -27,6 +27,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
         with:

_posts/2023-12-14-trusted-publishing.md

@@ -37,6 +37,8 @@ jobs:
     steps:
       # Set up
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with: