diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d93cb68..e158d3c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -82,6 +82,12 @@ jobs:
           # Empty for tag push (checks out the tag); honored for manual dispatch
           # to release an arbitrary commit.
           ref: ${{ github.event.inputs.ref }}
+          # This working tree is baked into the image at /etc/nixos-repo (via
+          # box-turnkey.nix's self.outPath). Don't persist the job token as an
+          # http.*.extraheader in .git/config, or the dead token ships in the
+          # image and makes `git pull` on installed boxes prompt for creds. The
+          # repo is public, so `git pull` on the box works anonymously.
+          persist-credentials: false
 
       # Install Nix natively + cache the /nix/store (shared with the test
       # workflow so releases build the exact same way).
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 72fe395..81c4088 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -170,6 +170,14 @@ jobs:
           # Empty for push/PR (checks out the event ref); honored for manual
           # dispatch to build an arbitrary commit.
           ref: ${{ github.event.inputs.ref }}
+          # This working tree is baked into the image at /etc/nixos-repo (via
+          # box-turnkey.nix's self.outPath). actions/checkout defaults to
+          # persisting the job's short-lived token as an http.*.extraheader in
+          # .git/config; baked in, that dead token makes `git pull` on installed
+          # boxes prompt for credentials. Don't persist it (the repo is public;
+          # the initial fetch still authenticates, and `git pull` on the box
+          # works anonymously).
+          persist-credentials: false
 
       # Install Nix natively + cache the /nix/store (shared with the release
       # workflow so both build images the exact same way).