diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 0296262..6772c78 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -22,6 +22,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0  # full depth
+          persist-credentials: false  # don't use the default `github.token`
 
       - name: Deploy
         run: |