From 1d5f04b2882f791f0826ceb9a4b351a32604bc48 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Bidoul?= <stephane.bidoul@gmail.com>
Date: Wed, 15 Jan 2025 11:24:45 +0100
Subject: [PATCH] Add persist-credential: false to release workflow

Following recommendation from zizmor
---
 .github/workflows/release.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 84c3f5366db..9506eeb3304 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
       - name: Build a binary wheel and a source tarball
         run: ./build-project.py
       - name: Store the distribution packages