diff --git a/.github/workflows/build-collection.yml b/.github/workflows/build-collection.yml
index 8377630..05f5766 100644
--- a/.github/workflows/build-collection.yml
+++ b/.github/workflows/build-collection.yml
@@ -70,6 +70,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: ./checkout
+          persist-credentials: false
 
       - name: Build collection artifact
         uses: ansible-community/github-action-build-collection@main
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 17c093d..6acaf4e 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -20,6 +20,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Install yamllint
         run: pip install yamllint
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index cc27341..d693f7a 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -20,6 +20,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v5
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index c634588..31e42e0 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -21,6 +21,8 @@ jobs:
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Run action
         id: action