diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1cb2193c8..9ed2f0107 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,6 +23,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - name: set up JDK 8
       uses: actions/setup-java@v2
       with:
diff --git a/.github/workflows/integration_test.yml b/.github/workflows/integration_test.yml
index 76fef5ad3..0d6fc346a 100644
--- a/.github/workflows/integration_test.yml
+++ b/.github/workflows/integration_test.yml
@@ -20,6 +20,7 @@ jobs:
         repository: 'optimizely/ci-helper-tools'
         path: 'home/runner/ci-helper-tools'
         ref: 'master'
+        persist-credentials: false
     - name: set SDK Branch if PR
       env: 
         HEAD_REF: ${{ github.head_ref }}
diff --git a/.github/workflows/java.yml b/.github/workflows/java.yml
index 2438cb3d3..6373e1942 100644
--- a/.github/workflows/java.yml
+++ b/.github/workflows/java.yml
@@ -18,6 +18,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
@@ -55,7 +57,9 @@ jobs:
     steps:
       - name: checkout
         uses: actions/checkout@v4
-      
+        with:
+          persist-credentials: false
+
       - name: set up JDK ${{ matrix.jdk }}
         uses: actions/setup-java@v4
         with:
diff --git a/.github/workflows/source_clear_cron.yml b/.github/workflows/source_clear_cron.yml
deleted file mode 100644
index 54eca5358..000000000
--- a/.github/workflows/source_clear_cron.yml
+++ /dev/null
@@ -1,16 +0,0 @@
-name: Source clear
-
-on:
-  schedule:
-    # Runs "weekly"
-    - cron: '0 0 * * 0'
-
-jobs:
-  source_clear:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - name: Source clear scan
-        env:
-          SRCCLR_API_TOKEN: ${{ secrets.SRCCLR_API_TOKEN }}
-        run: curl -sSL https://download.sourceclear.com/ci.sh | bash -s – scan