diff --git a/.github/workflows/lint_and_test.yml b/.github/workflows/lint_and_test.yml
index b4d1d06..bdcae99 100644
--- a/.github/workflows/lint_and_test.yml
+++ b/.github/workflows/lint_and_test.yml
@@ -21,6 +21,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # git show-ref v4.2.2
         with:
           fetch-depth: 0
+          persist-credentials: false # https://yossarian.net/til/post/actions-checkout-can-leak-github-credentials/
 
       - name: Setup Go version ${{ matrix.go-version }}
         uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # git show-ref v5.4.0