From 4a1e8320e2559338f09ce7a2fb60cecb13872b00 Mon Sep 17 00:00:00 2001
From: Billy O'Neal <bion@microsoft.com>
Date: Wed, 18 Jun 2025 16:42:36 -0700
Subject: [PATCH] Potential fix for code scanning alert no. 2: Workflow does
 not contain permissions (#46079)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 .github/workflows/test_modified_ports.yml | 23 -----------------------
 .github/workflows/untrustedPR.yml         |  3 +++
 2 files changed, 3 insertions(+), 23 deletions(-)
 delete mode 100644 .github/workflows/test_modified_ports.yml

diff --git a/.github/workflows/test_modified_ports.yml b/.github/workflows/test_modified_ports.yml
deleted file mode 100644
index fa1d8f68a6..0000000000
--- a/.github/workflows/test_modified_ports.yml
+++ /dev/null
@@ -1,23 +0,0 @@
-name: Test Modified Ports
-on:
-  push:
-    branches:
-      - onboard-actions
-jobs:
-  Windows:
-    runs-on:
-      - self-hosted
-      - "1ES.Pool=vcpkg-windows-wus"
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          # fetch-depth 50 tries to ensure we capture the whole history of the branch
-          fetch-depth: 50
-
-      - name: Bootstrap
-        run: ./bootstrap-vcpkg.sh
-      
-      - name: Example
-        shell: pwsh
-        run: Write-Host 'Running on 1ES Hosted GitHub Runners'
diff --git a/.github/workflows/untrustedPR.yml b/.github/workflows/untrustedPR.yml
index 328bfe6fb0..2510a34d11 100644
--- a/.github/workflows/untrustedPR.yml
+++ b/.github/workflows/untrustedPR.yml
@@ -1,5 +1,8 @@
 name: Check For Common Mistakes
 
+permissions:
+  contents: read
+
 on:
   pull_request: