From 0c24dd6b131042c3a7c12062928465901d19e5d9 Mon Sep 17 00:00:00 2001
From: James Renken <james@renken.is>
Date: Thu, 15 Oct 2026 11:47:49 -0700
Subject: [PATCH] ci: Fix IANA update GHA workflow

---
 .github/workflows/check-iana-registries.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/check-iana-registries.yml b/.github/workflows/check-iana-registries.yml
index 998a7562419..cbd2fa74b70 100644
--- a/.github/workflows/check-iana-registries.yml
+++ b/.github/workflows/check-iana-registries.yml
@@ -14,11 +14,11 @@ jobs:
       pull-requests: write
 
     steps:
-      - name: Checkout iana/data from main branch
+      - name: Checkout iana/data from main branch # zizmor: ignore[artipacked] we need the persisted credentials to git push
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           sparse-checkout: iana/data
-          persist-credentials: false
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       # If the branch already exists, this will fail, which will remind us about
       # the outstanding PR.