diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f3152f98f..c4e5950c3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
         uses: actions/checkout@v2
         with:
           fetch-depth: 0
+          persist-credentials: false # <--- this
 
       - name: Setup Node.js
         uses: actions/setup-node@v1