diff --git a/.github/workflows/rubocop.yml b/.github/workflows/rubocop.yml
index efdebfd2..67371dbc 100644
--- a/.github/workflows/rubocop.yml
+++ b/.github/workflows/rubocop.yml
@@ -12,7 +12,9 @@ jobs:
         ruby: ['2.7', '3.0']
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}
diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index c16dc0b1..e213c2e0 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -17,7 +17,9 @@ jobs:
         ruby: [2.7]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
       - name: Save root node_modules to cache
         uses: actions/cache@v3
@@ -66,7 +68,9 @@ jobs:
       # having to do with automatic kwarg splatting
       MT_KWARGS_HACK: 1
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - uses: actions/setup-node@v3
     - run: npm -g install yalc
     - run: yalc publish