fix(workflow): don't persist credentials

Author: aagbotemi

.github/workflows/audit.yml

@@ -18,6 +18,8 @@ jobs:
     steps:
       - name: "Check out PR branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Run audit"
         run: |

.github/workflows/cont_integration.yml

@@ -22,6 +22,8 @@ jobs:
     steps:
       - name: "Checkout"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Generate cache key"
         env:
@@ -74,6 +76,8 @@ jobs:
     steps:
       - name: "Checkout"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Set default toolchain"
         run: rustup default nightly

.github/workflows/kotlin-api-docs.yaml

@@ -8,6 +8,8 @@ jobs:
     steps:
       - name: "Checkout"
         uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: "Set up JDK 17"
         uses: actions/setup-java@v2

.github/workflows/live-tests.yaml

@@ -11,6 +11,8 @@ jobs:
     steps:
       - name: "Checkout publishing branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Cache"
         uses: actions/cache@v3
@@ -42,6 +44,8 @@ jobs:
     steps:
       - name: "Checkout"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Build Swift package"
         working-directory: bdk-swift
@@ -71,6 +75,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Rust 1.84.1"
         uses: actions-rs/toolchain@v1

.github/workflows/publish-android.yaml

@@ -9,6 +9,8 @@ jobs:
     steps:
       - name: "Check out PR branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Cache"
         uses: actions/cache@v3

.github/workflows/publish-jvm.yaml

@@ -8,6 +8,8 @@ jobs:
     steps:
       - name: "Checkout publishing branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Cache"
         uses: actions/cache@v3
@@ -42,6 +44,8 @@ jobs:
     steps:
       - name: "Checkout publishing branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Set up JDK"
         uses: actions/setup-java@v4
@@ -67,6 +71,8 @@ jobs:
     steps:
       - name: "Checkout publishing branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Cache"
         uses: actions/cache@v3

.github/workflows/publish-python.yaml

@@ -26,6 +26,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Rust 1.84.1"
         uses: actions-rs/toolchain@v1
@@ -64,6 +65,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Python"
         uses: actions/setup-python@v4
@@ -103,6 +105,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Python"
         uses: actions/setup-python@v4
@@ -141,6 +144,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
+          
       - uses: actions/setup-python@v4
         with:
           python-version: ${{ matrix.python }}
@@ -167,6 +172,8 @@ jobs:
     steps:
       - name: "Checkout"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Download artifacts in dist/ directory"
         uses: actions/download-artifact@v4

.github/workflows/test-android.yaml

@@ -21,6 +21,8 @@ jobs:
 
       - name: "Check out PR branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Cache"
         uses: actions/cache@v3

.github/workflows/test-jvm.yaml

@@ -16,6 +16,8 @@ jobs:
     steps:
       - name: "Check out PR branch"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Cache"
         uses: actions/cache@v3

.github/workflows/test-python.yaml

@@ -35,6 +35,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Rust 1.84.1"
         uses: actions-rs/toolchain@v1
@@ -80,6 +81,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Python"
         uses: actions/setup-python@v4
@@ -125,6 +127,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
+
       - uses: actions/setup-python@v4
         with:
           python-version: ${{ matrix.python }}
@@ -168,6 +172,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Python"
         uses: actions/setup-python@v4
@@ -204,6 +209,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
 
       - name: "Install Ruff"
         run: curl -LsSf https://astral.sh/ruff/install.sh | sh

.github/workflows/test-swift.yaml

@@ -17,6 +17,8 @@ jobs:
     steps:
       - name: "Checkout"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Build Swift package"
         working-directory: bdk-swift