From d910af35fff6b0a7ba58e4c30822516a6662db5f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sun, 29 Jun 2025 04:32:16 +0000
Subject: [PATCH 1/2] Initial plan


From 2245c8163ea6e96770a3e8b389a7c256e1e5874b Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sun, 29 Jun 2025 04:47:41 +0000
Subject: [PATCH 2/2] Add missing contents: read permissions to workflow files

Co-authored-by: trask <218610+trask@users.noreply.github.com>
---
 .github/workflows/ci-java.yml      | 1 +
 .github/workflows/close-stale.yaml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/ci-java.yml b/.github/workflows/ci-java.yml
index b2ad27f9d2..a34fa6339b 100644
--- a/.github/workflows/ci-java.yml
+++ b/.github/workflows/ci-java.yml
@@ -15,6 +15,7 @@ on:
       - main
 
 permissions:
+  contents: read
   pull-requests: write
 
 jobs:
diff --git a/.github/workflows/close-stale.yaml b/.github/workflows/close-stale.yaml
index 55faf33f71..3a609b9061 100644
--- a/.github/workflows/close-stale.yaml
+++ b/.github/workflows/close-stale.yaml
@@ -4,6 +4,7 @@ on:
     - cron: "40 3 * * *" # Run daily at 3:40 AM
 
 permissions:
+  contents: read
   issues: write
   pull-requests: write