From 08c51b8761d2a25b81f1ffabf533132ba64bda8c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Oct 2025 07:12:09 +0000
Subject: [PATCH 1/3] Initial plan


From 2078e527985b243a75282d86ffc3b23fa604b72f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Oct 2025 07:16:52 +0000
Subject: [PATCH 2/3] Add contents: read permission to AI Moderator workflow

Co-authored-by: stnguyen90 <1477010+stnguyen90@users.noreply.github.com>
---
 .github/workflows/ai-moderator.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ai-moderator.yml b/.github/workflows/ai-moderator.yml
index 859318ab95..c5a3b78756 100644
--- a/.github/workflows/ai-moderator.yml
+++ b/.github/workflows/ai-moderator.yml
@@ -17,6 +17,7 @@ on:
     types: [created, edited]
 
 permissions:
+  contents: read
   issues: write
   pull-requests: write
   discussions: write

From e5cd093a7b2a8a45f30b517a783edeec759d96dc Mon Sep 17 00:00:00 2001
From: Steven Nguyen <1477010+stnguyen90@users.noreply.github.com>
Date: Wed, 29 Oct 2025 00:45:49 -0700
Subject: [PATCH 3/3] Apply suggestion from @stnguyen90

---
 .github/workflows/ai-moderator.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ai-moderator.yml b/.github/workflows/ai-moderator.yml
index c5a3b78756..d0b180985f 100644
--- a/.github/workflows/ai-moderator.yml
+++ b/.github/workflows/ai-moderator.yml
@@ -17,7 +17,7 @@ on:
     types: [created, edited]
 
 permissions:
-  contents: read
+  models: read
   issues: write
   pull-requests: write
   discussions: write