From 997af1375da0dd5b7de38cc09ef608af155cfa9f Mon Sep 17 00:00:00 2001
From: Robert Sese <734194+rsese@users.noreply.github.com>
Date: Mon, 16 Oct 2023 05:45:24 -0500
Subject: [PATCH] add contents: read permissions for actions/checkout (#44485)

---
 .github/workflows/first-responder-docs-content.yml | 2 +-
 .github/workflows/repo-sync-stalls.yml             | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/first-responder-docs-content.yml b/.github/workflows/first-responder-docs-content.yml
index 703f8af84bfb..508649707fec 100644
--- a/.github/workflows/first-responder-docs-content.yml
+++ b/.github/workflows/first-responder-docs-content.yml
@@ -14,7 +14,7 @@ on:
       - unlabeled
 
 permissions:
-  contents: none
+  contents: read
 
 jobs:
   first-responder-triage-pr:
diff --git a/.github/workflows/repo-sync-stalls.yml b/.github/workflows/repo-sync-stalls.yml
index 8421ba9b458c..17d153230ba9 100644
--- a/.github/workflows/repo-sync-stalls.yml
+++ b/.github/workflows/repo-sync-stalls.yml
@@ -10,6 +10,7 @@ on:
     - cron: '20 */2 * * *' # Run every 2nd hour at 20 minutes after
 
 permissions:
+  contents: read
   pull-requests: read
 
 jobs: