diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 275490a..ac25395 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -37,6 +37,8 @@ jobs:
     name: ${{ matrix.config[1] }}
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - name: Set up Python
       uses: actions/setup-python@v5
       with:
diff --git a/.meta.toml b/.meta.toml
index cd6c1cf..7cd4163 100644
--- a/.meta.toml
+++ b/.meta.toml
@@ -2,7 +2,7 @@
 # https://github.com/zopefoundation/meta/tree/master/config/pure-python
 [meta]
 template = "pure-python"
-commit-id = "55111d56"
+commit-id = "b5bcf6d7"
 
 [python]
 with-windows = false
diff --git a/src/zope/meta/c-code/tests-cache.j2 b/src/zope/meta/c-code/tests-cache.j2
index c8e03b7..d052380 100644
--- a/src/zope/meta/c-code/tests-cache.j2
+++ b/src/zope/meta/c-code/tests-cache.j2
@@ -1,5 +1,7 @@
       - name: checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5
         with:
diff --git a/src/zope/meta/default/tests.yml.j2 b/src/zope/meta/default/tests.yml.j2
index 40cf253..c8977d6 100644
--- a/src/zope/meta/default/tests.yml.j2
+++ b/src/zope/meta/default/tests.yml.j2
@@ -90,6 +90,8 @@ jobs:
     %(line)s
 {% endfor %}
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - name: Set up Python
       uses: actions/setup-python@v5
       with: