diff --git a/.github/workflows/flake8.yml b/.github/workflows/flake8.yml
index 00f17377c89..de504e08d40 100644
--- a/.github/workflows/flake8.yml
+++ b/.github/workflows/flake8.yml
@@ -20,6 +20,7 @@ jobs:
         # more info https://github.community/t/github-actions-are-severely-limited-on-prs/18179/16
         # we checkout merge_commit here as this contains all new code from dev also. we don't need to compare against base_commit
         with:
+          persist-credentials: false
           fetch-depth: 0
           ref: refs/pull/${{ github.event.pull_request.number }}/merge
           # repository: ${{github.event.pull_request.head.repo.full_name}}
diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 6eb563ea63e..16f639d2d93 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -13,6 +13,7 @@ jobs:
     steps:
       - uses: actions/checkout@v2
         with:
+          persist-credentials: false
           submodules: recursive  # Fetch the Docsy theme
           fetch-depth: 0         # Fetch all history for .GitInfo and .Lastmod
 
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 664c874e90f..02d00c3c763 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -34,6 +34,8 @@ jobs:
 
       - name: Checkout
         uses: actions/checkout@v2
+        with:
+          persist-credentials: false
 
       - name: Read Docker Image Identifiers
         id: read-docker-image-identifiers
diff --git a/.github/workflows/k8s-testing.yml b/.github/workflows/k8s-testing.yml
index 25aa77d7c72..824a63e1c6c 100644
--- a/.github/workflows/k8s-testing.yml
+++ b/.github/workflows/k8s-testing.yml
@@ -55,6 +55,8 @@ jobs:
 
       - name: Checkout
         uses: actions/checkout@v2
+        with:
+          persist-credentials: false
 
       - name: Read Docker Image Identifiers
         id: read-docker-image-identifiers
diff --git a/.github/workflows/new-release-chart.yml b/.github/workflows/new-release-chart.yml
index 4f70db53b11..10ef828715b 100644
--- a/.github/workflows/new-release-chart.yml
+++ b/.github/workflows/new-release-chart.yml
@@ -8,7 +8,7 @@ on:
     inputs:
       release_number:
         description: 'Release number'
-        required: true  
+        required: true
 
 jobs:
   release-chart:
diff --git a/.github/workflows/plantuml.yml b/.github/workflows/plantuml.yml
index 31d988e2df0..e17781bac6b 100644
--- a/.github/workflows/plantuml.yml
+++ b/.github/workflows/plantuml.yml
@@ -14,6 +14,9 @@ jobs:
     steps:
       - name: Checkout Source
         uses: actions/checkout@v2
+        with:
+          persist-credentials: false
+
       - name: Get changed UML files
         id: getfile
         run: |
diff --git a/.github/workflows/test-helm-chart.yml b/.github/workflows/test-helm-chart.yml
index 69bca6f08e5..d83d336ec47 100644
--- a/.github/workflows/test-helm-chart.yml
+++ b/.github/workflows/test-helm-chart.yml
@@ -16,6 +16,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
         with:
+          persist-credentials: false
           fetch-depth: 0
 
       - name: Set up Helm
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index b0948ad066e..ee3da7f6dc9 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -28,6 +28,8 @@ jobs:
 
       - name: Checkout
         uses: actions/checkout@v2
+        with:
+          persist-credentials: false
 
       # - name: Read Docker Image Identifiers
       #   id: read-docker-image-identifiers