From e77cc1750ed7c55abab6f0cf8077990201097173 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Fri, 31 Oct 2025 21:28:55 +0000
Subject: [PATCH] ci: update GitHub template files

---
 .github/workflows/labeler.yaml     | 2 ++
 .github/workflows/welcome-bot.yaml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml
index 09ec2a8..d2f39ee 100644
--- a/.github/workflows/labeler.yaml
+++ b/.github/workflows/labeler.yaml
@@ -17,6 +17,8 @@ jobs:
           private_key: ${{ secrets.BOT_PRIVATE_KEY }}
 
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
       - name: Ensure labels exist
         env:
           GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
diff --git a/.github/workflows/welcome-bot.yaml b/.github/workflows/welcome-bot.yaml
index a7895d8..9d858d7 100644
--- a/.github/workflows/welcome-bot.yaml
+++ b/.github/workflows/welcome-bot.yaml
@@ -21,6 +21,8 @@ jobs:
           private_key: ${{ secrets.BOT_PRIVATE_KEY }}
 
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
       - name: Convert Repository Name to Title Case
         id: convert_repo_name
         run: |