diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 2f78146..eccc2c9 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -55,6 +55,7 @@ jobs:
         with:
           path: repo-src
           ref: ${{ inputs.ref || github.ref }}
+          persist-credentials: false
 
       - name: Configure Build Matrix
         id: configure
@@ -150,6 +151,7 @@ jobs:
         with:
           path: repo-src
           ref: ${{ inputs.ref || github.ref }}
+          persist-credentials: false
 
       - name: Install OS packages
         run: ./repo-src/build-scripts/00-packages.sh
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 8caf83d..d1a1856 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -47,6 +47,7 @@ jobs:
         with:
           path: repo-src
           ref: ${{ github.ref }}
+          persist-credentials: false
 
       - uses: actions/download-artifact@v4
         with: