Merge pull request #991 from paulfantom/creds

.github/workflows: do not persist credentials

.github/workflows/versions.yaml

@@ -9,6 +9,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v2
+      with:
+        persist-credentials: false
     - uses: actions/setup-go@v2
     - uses: romoh/dependencies-autoupdate@v1.1
       with: