From 348ec631c1c3859dd9f67a3470963b1e728ba87f Mon Sep 17 00:00:00 2001
From: FarhanAnjum-opti <farhan.anjum@optimizely.com>
Date: Mon, 23 Feb 2026 22:43:35 +0600
Subject: [PATCH 1/2] chore: remove outdated source clear GitHub Actions
 workflow

---
 .github/workflows/source_clear_cron.yml | 16 ----------------
 1 file changed, 16 deletions(-)
 delete mode 100644 .github/workflows/source_clear_cron.yml

diff --git a/.github/workflows/source_clear_cron.yml b/.github/workflows/source_clear_cron.yml
deleted file mode 100644
index 862b4a3f9..000000000
--- a/.github/workflows/source_clear_cron.yml
+++ /dev/null
@@ -1,16 +0,0 @@
-name: Source clear
-
-on:
-  schedule:
-    # Runs "weekly"
-    - cron: '0 0 * * 0'
-
-jobs:
-  source_clear:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - name: Source clear scan
-        env:
-          SRCCLR_API_TOKEN: ${{ secrets.SRCCLR_API_TOKEN }}
-        run: curl -sSL https://download.sourceclear.com/ci.sh | bash -s – scan

From fa6db53cf780fa9933ad59d2529c641547f9b488 Mon Sep 17 00:00:00 2001
From: FarhanAnjum-opti <farhan.anjum@optimizely.com>
Date: Mon, 23 Feb 2026 22:52:45 +0600
Subject: [PATCH 2/2] chore: add persist-credentials option to checkout steps
 in workflows

---
 .github/workflows/integration_test.yml | 1 +
 .github/workflows/python.yml           | 8 ++++++++
 2 files changed, 9 insertions(+)

diff --git a/.github/workflows/integration_test.yml b/.github/workflows/integration_test.yml
index 7619ca51e..bc08c2cb8 100644
--- a/.github/workflows/integration_test.yml
+++ b/.github/workflows/integration_test.yml
@@ -17,6 +17,7 @@ jobs:
     steps:
     - uses: actions/checkout@v3
       with:
+        persist-credentials: false
         # You should create a personal access token and store it in your repository
         token: ${{ secrets.CI_USER_TOKEN }}
         repository: 'optimizely/travisci-tools'
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 20894bbb1..830ca0f44 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -14,6 +14,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
@@ -29,6 +31,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Python 3.12
       uses: actions/setup-python@v4
       with:
@@ -68,6 +72,8 @@ jobs:
             - "3.12"
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v4
       with:
@@ -95,6 +101,8 @@ jobs:
             - "3.12"
     steps:
     - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v4
       with: