Drop credentials after checkout step.

Author: stefanholek

.github/workflows/python-package.yml

@@ -28,6 +28,8 @@ jobs:
     steps:
       - name: Check out project
         uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v6