Revert "Merge branch 'main' into ac/ac-1682/ef-migrations"

This reverts commit f98646a722, reversing
changes made to 7dfd2821f1.

.github/workflows/scan.yml

@@ -10,6 +10,8 @@ on:
   pull_request_target:
     types: [opened, synchronize]
 
+permissions: read-all
+
 jobs:
   check-run:
     name: Check PR run
@@ -20,8 +22,6 @@ jobs:
     runs-on: ubuntu-22.04
     needs: check-run
     permissions:
-      contents: read
-      pull-requests: write
       security-events: write
 
     steps:
@@ -43,7 +43,7 @@ jobs:
           additional_params: --report-format sarif --output-path . ${{ env.INCREMENTAL }}
 
       - name: Upload Checkmarx results to GitHub
-        uses: github/codeql-action/upload-sarif@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
+        uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6
         with:
           sarif_file: cx_result.sarif
 
@@ -51,9 +51,6 @@ jobs:
     name: Quality scan
     runs-on: ubuntu-22.04
     needs: check-run
-    permissions:
-      contents: read
-      pull-requests: write
 
     steps:
       - name: Check out repo