diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
index e6765da99..ab9529b65 100644
--- a/.github/workflows/lock.yml
+++ b/.github/workflows/lock.yml
@@ -17,6 +17,7 @@ jobs:
   action:
     runs-on: ubuntu-latest
     if: github.repository == 'tmux/tmux'
+    timeout-minutes: 10
     steps:
       - uses: dessant/lock-threads@v6
         with:
diff --git a/.github/workflows/regress.yml b/.github/workflows/regress.yml
index a84478357..376fc7bde 100644
--- a/.github/workflows/regress.yml
+++ b/.github/workflows/regress.yml
@@ -39,6 +39,8 @@ jobs:
     steps:
       - name: checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: dependencies
         if: runner.os == 'Linux'