From 804d06bdac51b423a8c2269372db2e6cb2fd60dc Mon Sep 17 00:00:00 2001
From: galz10 <galzahavi@google.com>
Date: Mon, 11 May 2026 15:05:59 -0700
Subject: [PATCH] chore: align checkout steps with standard practices

---
 .github/workflows/evals-nightly.yml       | 6 ++++++
 .github/workflows/gemini-invoke.yml       | 2 +-
 .github/workflows/gemini-issue-fixer.yml  | 2 +-
 .github/workflows/gemini-plan-execute.yml | 2 +-
 .github/workflows/gemini-review.yml       | 2 +-
 .github/workflows/publish.yml             | 2 ++
 6 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/evals-nightly.yml b/.github/workflows/evals-nightly.yml
index fe2287284..d07048eb8 100644
--- a/.github/workflows/evals-nightly.yml
+++ b/.github/workflows/evals-nightly.yml
@@ -21,6 +21,8 @@ jobs:
     steps:
       - name: 'Checkout code'
         uses: 'actions/checkout@v4' # ratchet:exclude
+        with:
+          persist-credentials: false
       - id: 'set-matrix'
         run: |
           FILES=$(find evals -maxdepth 1 -name "*.eval.ts" | sort | jq -R -s -c 'split("\n")[:-1]')
@@ -39,6 +41,8 @@ jobs:
     steps:
       - name: 'Checkout code'
         uses: 'actions/checkout@v4' # ratchet:exclude
+        with:
+          persist-credentials: false
 
       - name: 'Set up Node.js'
         uses: 'actions/setup-node@v4' # ratchet:exclude
@@ -90,6 +94,8 @@ jobs:
     steps:
       - name: 'Checkout code'
         uses: 'actions/checkout@v4' # ratchet:exclude
+        with:
+          persist-credentials: false
 
       - name: 'Set up Node.js'
         uses: 'actions/setup-node@v4' # ratchet:exclude
diff --git a/.github/workflows/gemini-invoke.yml b/.github/workflows/gemini-invoke.yml
index 664901a5d..ff624acba 100644
--- a/.github/workflows/gemini-invoke.yml
+++ b/.github/workflows/gemini-invoke.yml
@@ -40,7 +40,7 @@ jobs:
       - name: 'Checkout Code'
         uses: 'actions/checkout@v4' # ratchet:exclude
         with:
-          persist-credentials: 'false'
+          persist-credentials: false
 
       - name: 'Prepare prompt context'
         shell: 'bash'
diff --git a/.github/workflows/gemini-issue-fixer.yml b/.github/workflows/gemini-issue-fixer.yml
index 7382bfd07..8f93debe2 100644
--- a/.github/workflows/gemini-issue-fixer.yml
+++ b/.github/workflows/gemini-issue-fixer.yml
@@ -38,7 +38,7 @@ jobs:
       - name: 'Checkout repository'
         uses: 'actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8' # ratchet:actions/checkout@v6
         with:
-          persist-credentials: 'false'
+          persist-credentials: false
 
       - name: 'Prepare prompt context'
         shell: 'bash'
diff --git a/.github/workflows/gemini-plan-execute.yml b/.github/workflows/gemini-plan-execute.yml
index 9c36202dd..2e03d08ea 100644
--- a/.github/workflows/gemini-plan-execute.yml
+++ b/.github/workflows/gemini-plan-execute.yml
@@ -42,7 +42,7 @@ jobs:
       - name: 'Checkout Code'
         uses: 'actions/checkout@v4' # ratchet:exclude
         with:
-          persist-credentials: 'false'
+          persist-credentials: false
 
       - name: 'Prepare prompt context'
         shell: 'bash'
diff --git a/.github/workflows/gemini-review.yml b/.github/workflows/gemini-review.yml
index a46d1486c..6bdb62238 100644
--- a/.github/workflows/gemini-review.yml
+++ b/.github/workflows/gemini-review.yml
@@ -41,7 +41,7 @@ jobs:
       - name: 'Checkout repository'
         uses: 'actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8' # ratchet:actions/checkout@v6
         with:
-          persist-credentials: 'false'
+          persist-credentials: false
 
       - name: 'Prepare prompt context'
         shell: 'bash'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 46db0a2ee..62f2b1bf0 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,6 +17,8 @@ jobs:
     steps:
       - name: 'Checkout'
         uses: 'actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8' # ratchet:actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: 'Publish'
         id: 'publish'