Secure workflows

Author: rjfarmer

.github/workflows/pypi.yml

@@ -12,11 +12,13 @@ jobs:
       id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
+
     - name: Set up Python 
       uses: actions/setup-python@v5
       with:
         python-version: '3.x'
-        cache: 'pip'
 
     - name: Install dependices
       run: |

.github/workflows/test.yml

@@ -14,6 +14,9 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5
         with: