We need to add `persist-credentials: false` to the checkout steps in our workflows. https://github.com/actions/checkout