Grant contents: read to the eval gate workflow and docs example

fkapsahili · web-flow · commit 95a65506dfd6 · 2026-06-14T16:08:56.000+02:00
diff --git a/.github/workflows/eval-gate.yml b/.github/workflows/eval-gate.yml
@@ -22,6 +22,7 @@ jobs:
     name: Eval Gate (server-free)
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       pull-requests: write
 
     steps:
diff --git a/docs/docs/evaluation/regression-gate.md b/docs/docs/evaluation/regression-gate.md
@@ -245,6 +245,7 @@ eval-gate:
   runs-on: ubuntu-latest
   if: github.event_name == 'pull_request'
   permissions:
+    contents: read
     pull-requests: write
 
   steps:
