[elpa] externals/bind-key cb79d4f386 06/13: Harden GitHub CI configuration

[ELPA Syncer]

branch: externals/bind-key
commit cb79d4f38678dbbd8198a40dd96215427a7c85cf
Author: Stefan Kangas <stefankangas@gmail.com>
Commit: Stefan Kangas <stefankangas@gmail.com>

    Harden GitHub CI configuration
---
 .github/workflows/test.yml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 32a3262413..e5ecf99e6b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -2,6 +2,7 @@
 
 name: Main workflow
 on: [push, pull_request]
+permissions: {}
 
 jobs:
   build:
@@ -26,8 +27,12 @@ jobs:
           - emacs_version: 'snapshot'
             allow_failure: true
     steps:
-    - uses: actions/checkout@v2
-    - uses: purcell/setup-emacs@master
+    - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
+
+    - name: Install Emacs
+      uses: purcell/setup-emacs@master
       with:
         version: ${{ matrix.emacs_version }}