From ce6c77413617af228e35bf6accd688edab358682 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 21 Aug 2026 09:43:14 +0000
Subject: [PATCH 1/2] Rename unit-tests job to tests

Co-authored-by: AlexanderLanin <5074553+AlexanderLanin@users.noreply.github.com>
---
 .github/workflows/on-pr.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/on-pr.yml b/.github/workflows/on-pr.yml
index 99a5d0da9..447d4909c 100644
--- a/.github/workflows/on-pr.yml
+++ b/.github/workflows/on-pr.yml
@@ -30,11 +30,11 @@ jobs:
     permissions:
       contents: read
 
-  unit-tests:
+  tests:
     uses: ./.github/workflows/_test.yml
 
   docs-build:
-    needs: [unit-tests]
+    needs: [tests]
     uses: eclipse-score/cicd-workflows/.github/workflows/docs.yml@7b1b65cbb59d5f817e639a731f018db5adb3028a
     with:
       bazel-target: "//:docs"

From 32521196ea6847e4882adbb28a2bf608b172bab4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 21 Aug 2026 09:43:52 +0000
Subject: [PATCH 2/2] Limit docs workflow permissions

Co-authored-by: AlexanderLanin <5074553+AlexanderLanin@users.noreply.github.com>
---
 .github/workflows/on-pr.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/on-pr.yml b/.github/workflows/on-pr.yml
index 447d4909c..fa8a7e7f6 100644
--- a/.github/workflows/on-pr.yml
+++ b/.github/workflows/on-pr.yml
@@ -36,6 +36,8 @@ jobs:
   docs-build:
     needs: [tests]
     uses: eclipse-score/cicd-workflows/.github/workflows/docs.yml@7b1b65cbb59d5f817e639a731f018db5adb3028a
+    permissions:
+      contents: read
     with:
       bazel-target: "//:docs"
       tests-report-artifact: tests-report