diff --git a/.github/workflows/integration_test.yml b/.github/workflows/integration_test.yml
index 7619ca51..bc08c2cb 100644
--- a/.github/workflows/integration_test.yml
+++ b/.github/workflows/integration_test.yml
@@ -17,6 +17,7 @@ jobs:
     steps:
     - uses: actions/checkout@v3
       with:
+        persist-credentials: false
         # You should create a personal access token and store it in your repository
         token: ${{ secrets.CI_USER_TOKEN }}
         repository: 'optimizely/travisci-tools'
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 20894bbb..830ca0f4 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -14,6 +14,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
@@ -29,6 +31,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Python 3.12
       uses: actions/setup-python@v4
       with:
@@ -68,6 +72,8 @@ jobs:
             - "3.12"
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v4
       with:
@@ -95,6 +101,8 @@ jobs:
             - "3.12"
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v4
       with:
diff --git a/.github/workflows/source_clear_cron.yml b/.github/workflows/source_clear_cron.yml
deleted file mode 100644
index 862b4a3f..00000000
--- a/.github/workflows/source_clear_cron.yml
+++ /dev/null
@@ -1,16 +0,0 @@
-name: Source clear
-
-on:
-  schedule:
-    # Runs "weekly"
-    - cron: '0 0 * * 0'
-
-jobs:
-  source_clear:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - name: Source clear scan
-        env:
-          SRCCLR_API_TOKEN: ${{ secrets.SRCCLR_API_TOKEN }}
-        run: curl -sSL https://download.sourceclear.com/ci.sh | bash -s – scan