From 6caa5bb51936730fc2c4457480b62ee71ad3c8e8 Mon Sep 17 00:00:00 2001
From: bbhtt <bbhtt.zn0i8@slmail.me>
Date: Fri, 22 May 2026 09:18:36 +0530
Subject: [PATCH] ci: Set persist-credentials to false in checkout step

It's a no-op since permissions is already set to read but satisfies
zizmor
---
 .github/workflows/check.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 65f77bc9..05ddf863 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -46,6 +46,8 @@ jobs:
     - name: Check out flatpak-builder
       # 6.0.2
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      with:
+        persist-credentials: false
 
     - name: Install build dependencies
       run: |