diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e5c56438..5acd6c5f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -110,6 +110,7 @@ jobs:
       - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Setup Node.js
         uses: actions/setup-node@v4.0.2
         with:
diff --git a/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/ci.yml.jinja b/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/ci.yml.jinja
index 023c55a8..d27a536e 100644
--- a/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/ci.yml.jinja	
+++ b/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/ci.yml.jinja	
@@ -141,6 +141,7 @@ jobs:
       - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Setup Node.js
         uses: actions/setup-node@v4.0.2
         with: