[ci] update actions/checkout calls (#7037)

Author: jameslamb

.github/workflows/cuda.yml

@@ -74,6 +74,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Setup and run tests
         run: |

.github/workflows/linkchecker.yml

@@ -21,6 +21,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: false
       - name: Setup and run tests
         run: |

.github/workflows/optional_checks.yml

@@ -14,6 +14,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: false
       - name: Check that all tests succeeded
         shell: bash

.github/workflows/python_package.yml

@@ -27,6 +27,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Setup and run tests
         shell: bash
@@ -106,6 +107,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Setup and run tests
         shell: bash
@@ -140,6 +142,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Create wheel
         run: |
@@ -174,6 +177,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Create wheel
         run: |

.github/workflows/r_package.yml

@@ -160,6 +160,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Install pandoc
         uses: r-lib/actions/setup-pandoc@v2
@@ -219,6 +220,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Install packages
         shell: bash
@@ -259,6 +261,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Install pandoc
         uses: r-lib/actions/setup-pandoc@v2

.github/workflows/r_valgrind.yml

@@ -28,6 +28,7 @@ jobs:
         with:
           fetch-depth: 5
           submodules: true
+          persist-credentials: false
           repository: microsoft/LightGBM
           ref: "refs/pull/${{ github.event.client_payload.pr_number }}/merge"
       - name: Send init status

.github/workflows/static_analysis.yml

@@ -30,6 +30,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: false
       - name: Setup and run tests
         shell: bash
@@ -48,6 +49,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: false
       - name: Setup and run tests
         shell: bash
@@ -70,6 +72,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: true
       - name: Install packages
         shell: bash

.github/workflows/triggering_comments.yml

@@ -18,6 +18,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 5
+          persist-credentials: false
           submodules: false
 
       - name: Trigger R valgrind tests