[plan] Fix artipacked credential persistence vulnerability in daily-copilot-token-report

[github-actions]

Objective

Fix a Medium severity security vulnerability (artipacked) in the daily-copilot-token-report workflow identified by zizmor in discussion #18283.

Context

actions/checkout persists GitHub token credentials in .git/config by default (persist-credentials: true). If the workflow uploads artifacts that include the workspace directory or .git/, those credentials can be exfiltrated by anyone with artifact download access.

• Tool: zizmor
• Severity: Medium
• Affected file: .github/workflows/daily-copilot-token-report.md
• Location: Checkout step (compiles to line 282 in .github/workflows/daily-copilot-token-report.lock.yml)

Approach

1. Open .github/workflows/daily-copilot-token-report.md
2. Locate the actions/checkout step in the frontmatter or workflow body
3. Add persist-credentials: false to the checkout step's with block:

- uses: actions/checkout@(sha)
  with:
    persist-credentials: false

If the workflow requires authenticated git operations after checkout, alternatively ensure the artifact upload step excludes .git:

- uses: actions/upload-artifact@(sha)
  with:
    path: |
      .
      !.git

4. Run make recompile to regenerate the .lock.yml file
5. Run make agent-finish to validate

Files to Modify

• .github/workflows/daily-copilot-token-report.md — add persist-credentials: false to checkout

Acceptance Criteria

• actions/checkout step has persist-credentials: false (or artifact upload excludes .git)
• make recompile succeeds without errors
• make agent-finish passes
• zizmor no longer reports artipacked for this workflow

Generated by Plan Command for issue #discussion #18283

• expires on Feb 27, 2026, 6:53 AM UTC