From e33306b6af940d81a5c83245e37fb6629497fa73 Mon Sep 17 00:00:00 2001
From: b267a <b267a@protonmail.com>
Date: Fri, 30 Jan 2026 19:01:29 +0100
Subject: [PATCH] Fix: Ensure credentials are not persisted during checkout in
 sync workflow

---
 .github/workflows/sync-to-public.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/sync-to-public.yml b/.github/workflows/sync-to-public.yml
index f76e9bf..30f1a55 100644
--- a/.github/workflows/sync-to-public.yml
+++ b/.github/workflows/sync-to-public.yml
@@ -27,6 +27,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Verify token works
         env: