diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 2575aae..26fd621 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -171,6 +171,10 @@ jobs:
       contents: write
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
       - uses: actions/download-artifact@v6
         with:
           name: ghostty-appimage-aarch64