- Use persist-credentials: false for actions/checkout, so we don't leak the github token credentials to subsequent jobs. - Remove one / from the Edit/Write permissions. Currently, with the absolute path from github.workspace, we expand to three slashes while we only need two.