From 85f04faf1410dc4d4e5d531b6a3484b3f5ad3b41 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 2 Mar 2026 03:58:24 +0000
Subject: [PATCH 1/2] Initial plan


From e784c48b10678a46caed0edcb3d7f3c71d68c6ec Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 2 Mar 2026 04:00:23 +0000
Subject: [PATCH 2/2] Add permissions to workflow files missing them

Co-authored-by: torosent <17064840+torosent@users.noreply.github.com>
---
 .github/workflows/azure-functions-smoke-tests.yml | 3 +++
 .github/workflows/validate-build.yml              | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/azure-functions-smoke-tests.yml b/.github/workflows/azure-functions-smoke-tests.yml
index 9ee868fda..dab61e597 100644
--- a/.github/workflows/azure-functions-smoke-tests.yml
+++ b/.github/workflows/azure-functions-smoke-tests.yml
@@ -10,6 +10,9 @@ on:
     paths-ignore: [ '**.md' ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   smoke-tests:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/validate-build.yml b/.github/workflows/validate-build.yml
index 0cc79a167..f1e645259 100644
--- a/.github/workflows/validate-build.yml
+++ b/.github/workflows/validate-build.yml
@@ -12,6 +12,9 @@ on:
       - 'feature/**'
     paths-ignore: [ '**.md' ]
 
+permissions:
+  contents: read
+
 env:
   solution: Microsoft.DurableTask.sln
   config: release