Improve some actions

Author: jepler

.github/workflows/codeql.yml

@@ -29,7 +29,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-
+        with:
+          persist-credentials: false
       - name: Install Dependencies (python)
         run: pip3 install -r requirements-dev.txt
 

.github/workflows/cron.yml

@@ -21,6 +21,8 @@ jobs:
       run: echo "$GITHUB_CONTEXT"
 
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Set up Python 3.10
       uses: actions/setup-python@v5
@@ -37,8 +39,10 @@ jobs:
       run: python -munittest
 
     - name: Commit updates
+      env:
+        REPO: ${{ github.repository }}
       run: |
         git config user.name "${GITHUB_ACTOR} (github actions cron)"
         git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
-        git remote set-url --push origin https://${GITHUB_ACTOR}:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}
+        git remote set-url --push origin "https://${GITHUB_ACTOR}:${{ secrets.GITHUB_TOKEN }}@github.com/$REPO"
         if git commit -m"update iersdata" src/wwvb/iersdata.json; then git push origin HEAD:main; fi

.github/workflows/release.yml

@@ -19,6 +19,8 @@ jobs:
       run: echo "$GITHUB_CONTEXT"
 
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Set up Python
       uses: actions/setup-python@v5

.github/workflows/test.yml

@@ -22,6 +22,8 @@ jobs:
         python-version: '3.12'
 
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Install deps
       run: python -mpip install -r requirements-dev.txt
@@ -52,6 +54,8 @@ jobs:
     runs-on: ${{ matrix.os-version }}
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Set up Python
       uses: actions/setup-python@v5
@@ -84,6 +88,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Set up Python
       uses: actions/setup-python@v5