Repo File Sync: Update to Mu DevOps v15.0.3

.github/workflows/issue-assignment.yml

@@ -19,8 +19,5 @@ on:
 jobs:
   apply:
 
-    permissions:
-      contents: read
-      issues: write
-
-    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v15.0.2
+    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v15.0.3
+    secrets: inherit

.github/workflows/label-sync.yml

@@ -25,7 +25,5 @@ on:
 jobs:
   sync:
 
-    permissions:
-      issues: write
-
-    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v15.0.2
+    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v15.0.3
+    secrets: inherit

.github/workflows/release-draft.yml

@@ -29,9 +29,5 @@ jobs:
   draft:
     name: Draft Releases
 
-    permissions:
-      contents: write
-      pull-requests: write
-
-    uses: microsoft/mu_devops/.github/workflows/ReleaseDrafter.yml@v15.0.2
+    uses: microsoft/mu_devops/.github/workflows/ReleaseDrafter.yml@v15.0.3
     secrets: inherit

.github/workflows/scheduled-maintenance.yml

@@ -25,17 +25,21 @@ jobs:
   repo_cleanup:
     runs-on: ubuntu-latest
 
-    permissions:
-      pull-requests: write
-      issues: write
-
     steps:
+      - name: Generate Token
+        id: app-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.MU_ACCESS_APP_ID }}
+          private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+
       - name: Get Repository Info
         run: echo "REPOSITORY_NAME=${GITHUB_REPOSITORY#*/}" >> $GITHUB_ENV
 
       - name: Prune Won't Fix Pull Requests
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           REPOSITORY: ${{ env.REPOSITORY_NAME }}
         run: |
           gh api \
@@ -50,7 +54,7 @@ jobs:
 
       - name: Prune Won't Fix Issues
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           REPOSITORY: ${{ env.REPOSITORY_NAME }}
         run: |
           gh api \

.github/workflows/stale.yml

@@ -25,8 +25,5 @@ on:
 jobs:
   check:
 
-    permissions:
-      issues: write
-      pull-requests: write
-
-    uses: microsoft/mu_devops/.github/workflows/Stale.yml@v15.0.2
+    uses: microsoft/mu_devops/.github/workflows/Stale.yml@v15.0.3
+    secrets: inherit

.github/workflows/triage-issues.yml

@@ -20,7 +20,5 @@ on:
 jobs:
   triage:
 
-    permissions:
-      issues: write
-
-    uses: microsoft/mu_devops/.github/workflows/IssueTriager.yml@v15.0.2
+    uses: microsoft/mu_devops/.github/workflows/IssueTriager.yml@v15.0.3
+    secrets: inherit