From da0bf8c112a6a68ff3cd813bb68132a1816d1b1e Mon Sep 17 00:00:00 2001
From: GoogilyBoogily <mayerderekj@gmail.com>
Date: Tue, 18 Aug 2026 14:30:31 -0500
Subject: [PATCH] fix(release-pipeline): give the ci job contents: read so
 publish stops failing

---
 .github/workflows/release-pipeline.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release-pipeline.yml b/.github/workflows/release-pipeline.yml
index f480265..2b4c7da 100644
--- a/.github/workflows/release-pipeline.yml
+++ b/.github/workflows/release-pipeline.yml
@@ -48,6 +48,8 @@ concurrency:
 jobs:
   ci:
     uses: braintree/web-sdk-github-actions/.github/workflows/ci.yml@cf4b40ff4b46c96aadbfae38806b8de404a98cb3
+    permissions:
+      contents: read
     with:
       lint-command: ${{ inputs.lint-command }}
       test-command: ${{ inputs.test-command }}