diff --git a/.github/workflows/cloud-benchmarking-workflow.yml b/.github/workflows/cloud-benchmarking-workflow.yml
index f658a6109..932d6b986 100644
--- a/.github/workflows/cloud-benchmarking-workflow.yml
+++ b/.github/workflows/cloud-benchmarking-workflow.yml
@@ -33,6 +33,7 @@ jobs:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Set Initial Variables
         # By default we use 1Hr benchmarks
         run: |
@@ -43,8 +44,8 @@ jobs:
       # conditionally overwrite variables if a tag was the triggering event
       - name: Reset Initial Variables for pull request
         run: |
-          echo "GITHUB_SHA_SHORT=`echo ${{ github.event.pull_request.head.sha }} | cut -c1-7`" >> $GITHUB_ENV
-          echo "COMMIT_NAME=`echo ${{ github.event.pull_request.head.sha }} | cut -c1-7`" >> $GITHUB_ENV
+          echo "GITHUB_SHA_SHORT=${{ github.event.pull_request.head.sha | substr(0, 7) }}" >> $GITHUB_ENV
+          echo "COMMIT_NAME=${{ github.event.pull_request.head.sha | substr(0, 7) }}" >> $GITHUB_ENV
         if: github.event_name == 'pull_request'
       - name: Reset Variables For Tags
         # We do a 1Month benchmark for tags
diff --git a/.github/workflows/gcclassic-compile-tests.yml b/.github/workflows/gcclassic-compile-tests.yml
index 0c0a5528b..77940a3b1 100644
--- a/.github/workflows/gcclassic-compile-tests.yml
+++ b/.github/workflows/gcclassic-compile-tests.yml
@@ -19,6 +19,8 @@ jobs:
 
     steps:
       - name: Checkout code
+        with:
+          persist-credentials: false
         uses: actions/checkout@v4
 
       - name: Install dependencies