ci: fixups to pass zizmor audit (#226)

Author: dsanders11

.github/workflows/ci.yml

@@ -14,6 +14,8 @@ jobs:
 
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        persist-credentials: false
     - name: 'Install Node'
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
@@ -31,6 +33,8 @@ jobs:
 
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        persist-credentials: false
     - name: 'Install Node'
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:

.github/workflows/release-calendar-events.yml

@@ -16,12 +16,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        env:
+          MAJOR: ${{ github.event.inputs.major }}
         with:
           script: |
             const fs = require('node:fs/promises');
 
             const INITIAL_MILESTONE = 64;
-            const major = ${{ github.event.inputs.major }};
+            const major = parseInt(process.env.MAJOR);
             const milestone = INITIAL_MILESTONE + major*2;
 
             const events = [['Subject', 'Start Date', 'End Date', 'All Day Event']];