do not persist creds

Author: blink1073

.github/workflows/dist-python.yml

@@ -28,9 +28,7 @@ jobs:
     name: Make Dist
     runs-on: macos-latest
     permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@v6
+      contents: write      - uses: actions/checkout@v6
         with:
           persist-credentials: false
 

.github/workflows/test-python.yml

@@ -29,6 +29,8 @@ jobs:
           - ["Sharded", "tests/test_sharded_clusters.py", "3.14"]
     steps:
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
       - name: Setup Python
         uses: actions/setup-python@v6
         with: