diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c2f517227..f7cb66b4b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -14,8 +14,9 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@v4
       with:
-       submodules: true
-       ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
+        submodules: true
+        persist-credentials: false
+        ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
 
     - name: Setup environment
       uses: ./.github/actions/setup-build-env
@@ -29,8 +30,8 @@ jobs:
     - name: Build Verific
       run: cd verific/tclmain && make -j6
 
-    - name: Build Yosys
-      run: make yosys -j6 ENABLE_PYOSYS=0 ENABLE_CCACHE=0 ENABLE_EDITLINE=0
+    - name: Build
+      run: make yosys -j6
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3
diff --git a/.github/workflows/source-vendor.yml b/.github/workflows/source-vendor.yml
index fcff8f241..03750b05b 100644
--- a/.github/workflows/source-vendor.yml
+++ b/.github/workflows/source-vendor.yml
@@ -9,7 +9,8 @@ jobs:
       - name: Checkout repository with submodules
         uses: actions/checkout@v4
         with:
-          submodules: true
+          submodules: 'recursive'
+          persist-credentials: false
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
 
       - name: Create clean tarball
diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml
index 4772a9511..38eaba247 100644
--- a/.github/workflows/test-build.yml
+++ b/.github/workflows/test-build.yml
@@ -46,6 +46,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
 
       - name: Setup environment
@@ -96,6 +97,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
 
       - name: Setup environment
@@ -180,6 +182,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
 
       - name: Setup environment
@@ -221,6 +224,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: true
+          persist-credentials: false
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
 
       - name: Runtime environment