mirror of
https://github.com/bitwarden/server
synced 2025-12-24 12:13:17 +00:00
- Add empty permission set at workflow level to remove default GITHUB_TOKEN permissions - Add empty permission set to setup job as it only runs bash commands - Add contents:write to GitHub App tokens in bump_version and cut_branch jobs for git operations - Add empty permission set to move_edd_db_scripts job as called workflow declares its own permissions - Remove secrets:inherit as called workflow accesses Azure secrets directly