From c6dfd9deefdf53ae180bdedc9ed04a19711f5c56 Mon Sep 17 00:00:00 2001
From: Xavier Lario <xavier.lario@gmail.com>
Date: Mon, 20 Apr 2026 16:24:10 +0200
Subject: [PATCH] fix(ci): add contents: read permission to plan job

---
 .github/workflows/plan.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/plan.yml b/.github/workflows/plan.yml
index e9ffb05..846307a 100644
--- a/.github/workflows/plan.yml
+++ b/.github/workflows/plan.yml
@@ -46,6 +46,7 @@ jobs:
     name: Terraform Plan - ${{ matrix.site }}
     runs-on: self-hosted
     permissions:
+      contents: read
       pull-requests: write
 
     steps: