Disable persisted checkout credentials in e2e workflow

[Copilot]

Description:
Addresses the code scanning finding on the e2e workflow by removing credential persistence from the flagged checkout step.

• Workflow hardening
  • Adds persist-credentials: false to the actions/checkout@v7 step in setup-java-set-default within .github/workflows/e2e-versions.yml.
  • Aligns this job with the existing secure checkout pattern already used elsewhere in the workflow.
• Scope
  • Limits the change to the single step identified by the alert.
  • No production code or test logic changes.

- name: Checkoutuses: actions/checkout@v7with:
persist-credentials: false

Related issue:
Code scanning alert #124

Check list:

• Ran npm run check locally (format, lint, build, test) and all checks pass.
• Mark if documentation changes are required.
• Mark if tests were added or updated to cover the changes.

[Copilot]

Pull request overview

This PR hardens the .github/workflows/e2e-versions.yml GitHub Actions workflow by disabling persisted checkout credentials for the setup-java-set-default job’s actions/checkout@v7 step, aligning it with the existing secure checkout pattern already used elsewhere in the workflow.

Changes:

• Add with: persist-credentials: false to the Checkout step in the setup-java-set-default job.

Show a summary per file

File	Description
.github/workflows/e2e-versions.yml	Disables persisted checkout credentials in the setup-java-set-default job to address the flagged workflow security finding.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/1 changed files
• Comments generated: 0
• Review effort level: Low