diff --git a/.azure-pipelines/publish.yml b/.azure-pipelines/publish.yml
index 30763c8ff..53db5ee37 100644
--- a/.azure-pipelines/publish.yml
+++ b/.azure-pipelines/publish.yml
@@ -36,6 +36,10 @@ extends:
               signType: real
               signWithProd: true
         steps:
+        - checkout: self
+          persistCredentials: false
+          displayName: "Checkout code"
+
         - task: UseNode@1
           inputs:
             version: '20.x'