From c2e1f3bef27f163666398faa87dd247da548a14f Mon Sep 17 00:00:00 2001
From: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Date: Wed, 25 Mar 2026 16:59:42 -0700
Subject: [PATCH] chore: give pr pipeline release read permissions (#304929)

The core-ci task requires reading some companion extension releases. This PR modifies the permissions to allow the build to read those releases.
---
 .github/workflows/pr.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index bb87ac077bc..4d5040fb600 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -10,7 +10,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-permissions: {}
+permissions:
+  contents: read
 
 env:
   VSCODE_QUALITY: 'oss'