As teams increasingly depend on open-source components and automated CI/CD pipelines, the permissions and workflows connecting those systems deserve closer scrutiny.