Add permissions for build-link-index-lambda

[reakaleek]

Fixes https://github.com/elastic/docs-builder/actions/runs/26807593314

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 3a7ec5c6-f5f9-4269-98aa-cc62be3cbf08

📥 Commits

Reviewing files that changed from the base of the PR and between 18c21d4 and 0a56e9d.

📒 Files selected for processing (1)

• .github/workflows/release.yml

---

📝 Walkthrough

Walkthrough

This PR adds permissions.contents: read to the build-link-index-lambda job in .github/workflows/release.yml, implementing least-privilege access control at the job level. The change restricts the job's permissions to read-only access to repository contents, reducing the scope of permissions granted to that workflow step.

Possibly related PRs

• elastic/docs-builder#3321: Both PRs add GitHub Actions permissions.contents: read to workflow configuration, making them directly related security hardening changes.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	No description was provided, making it impossible to assess relatedness to the changeset.	Add a brief description explaining why the permissions are being added (e.g., security requirement, workflow fix, or GitHub Actions best practice).

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately and concisely describes the main change: adding permissions for the build-link-index-lambda job.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch reakaleek-patch-4

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}