Don't persist credentials longer than necessary in GitHub actions

Author: robtimus

.github/workflows/build.yml

@@ -30,6 +30,8 @@ jobs:
       fail-fast: false
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
       - name: Set up JDK ${{matrix.java}}
         uses: actions/setup-java@v5
         with:
@@ -43,6 +45,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
       - name: Set up JDK 11
         uses: actions/setup-java@v5
         with:

.github/workflows/dependency-review.yml

@@ -22,5 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4

.github/workflows/sonarcloud.yml

@@ -30,6 +30,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
         with:
+          persist-credentials: false
           fetch-depth: 0
       - name: Set up JDK 17
         uses: actions/setup-java@v5