From 53ee0098f067bb2560de110773aebda7e4b75052 Mon Sep 17 00:00:00 2001
From: Will Gordon <wgordon@redhat.com>
Date: Sun, 18 Oct 2026 15:38:09 -0400
Subject: [PATCH] fix(ci): disable checkout credential persistence in
 render-template

---
 .github/workflows/render-template.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/render-template.yaml b/.github/workflows/render-template.yaml
index cf67f25..205f4d6 100644
--- a/.github/workflows/render-template.yaml
+++ b/.github/workflows/render-template.yaml
@@ -28,6 +28,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.ref }}
+          persist-credentials: false
 
       - uses: ./.github/actions/nix-setup