ci: set persist-credentials to false for checkout action #139

	on:
	# Trigger analysis when pushing in master or pull requests, and when creating
	# a pull request.
	push:
	branches:
	- master
	pull_request:
	types: [opened, synchronize, reopened]
	name: SonarCloud
	jobs:
	sonarcloud:
	name: SonarCloud
	runs-on: ubuntu-latest
	if: ${{ github.repository_owner == 'nrkno' }}

	steps:
	- uses: actions/checkout@v4
	with:
	# Disabling shallow clone is recommended for improving relevancy of reporting
	fetch-depth: 0

	- name: Use Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 16
	- name: Prepare Environment
	run: \|
	yarn
	env:
	CI: true

	- name: SonarCloud Scan
	uses: sonarsource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback