bitwarden-workflow-linter-rules

Mechanical Rules — apply automatically

name_capitalized

• Trigger: A workflow-level or job-level name: value does not start with a capital letter.
• Fix: Capitalize the first character of the name value. Do not change anything else.

permissions_exist

• Trigger: A workflow or job is missing an explicit permissions: key.
• Fix: Add permissions: {} at the workflow level if all jobs are missing it, or at the individual job level if only some jobs are missing it. Prefer job-level permissions.

pinned_job_runner

• Trigger: A job's runs-on: uses an unpinned label.
• Fix: Replace with the current pinned equivalent:
  • ubuntu-latest → ubuntu-24.04
  • windows-latest → windows-2022
  • macos-latest → macos-14