From f8c7e0c77914539c1a379a4eaa6efeab58e01ff5 Mon Sep 17 00:00:00 2001
From: Vince Grassia <593223+vgrassia@users.noreply.github.com>
Date: Mon, 7 Jul 2025 16:45:14 +0000
Subject: [PATCH] Add top-level permissions block to satisfy workflow linter
 (#383)

---
 .github/workflows/build-unified.yml         | 3 +++
 .github/workflows/release-digital-ocean.yml | 3 +++
 .github/workflows/release.yml               | 3 +++
 3 files changed, 9 insertions(+)

diff --git a/.github/workflows/build-unified.yml b/.github/workflows/build-unified.yml
index 28fa1ed..1c479cd 100644
--- a/.github/workflows/build-unified.yml
+++ b/.github/workflows/build-unified.yml
@@ -23,6 +23,9 @@ on:
 env:
   _AZ_REGISTRY: bitwardenprod.azurecr.io
 
+permissions:
+  contents: read
+
 jobs:
   build-docker:
     name: Build Docker image
diff --git a/.github/workflows/release-digital-ocean.yml b/.github/workflows/release-digital-ocean.yml
index 4a84140..b9f30f4 100644
--- a/.github/workflows/release-digital-ocean.yml
+++ b/.github/workflows/release-digital-ocean.yml
@@ -10,6 +10,9 @@ on:
 
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   build-image:
     name: Build Image
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a21baba..56f097f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,6 +19,9 @@ on:
 env:
   _AZ_REGISTRY: bitwardenprod.azurecr.io
 
+permissions:
+  contents: read
+
 jobs:
   setup:
     name: Setup