diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a6fb708..d4a6f6d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -35,7 +35,7 @@ env:
 
 jobs:
   build:
-    runs-on: windows-latest
+    runs-on: windows-2025
 
     steps:
       - name: Print inputs
@@ -50,6 +50,7 @@ jobs:
         if: github.event.inputs.ref == ''
         with:
           submodules: recursive
+          persist-credentials: false
 
       - name: Checkout specific build and submodules
         uses: actions/checkout@v4
@@ -57,6 +58,7 @@ jobs:
         with:
           ref: ${{ github.event.inputs.ref }}
           submodules: recursive
+          persist-credentials: false
 
       - name: Add MSBuild to PATH
         uses: microsoft/setup-msbuild@v2
diff --git a/.github/workflows/issue-check.yml b/.github/workflows/issue-check.yml
index b04b488..82c3b27 100644
--- a/.github/workflows/issue-check.yml
+++ b/.github/workflows/issue-check.yml
@@ -6,10 +6,12 @@ on:
 
 jobs:
   check_keywords:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Check for keywords in issue title and body
         id: check_keywords