hopefully last workflow updates for slack alert composite action 🤞 (#44513)

.github/workflows/codeowners-docs-engineering.yml

@@ -38,6 +38,9 @@ jobs:
       PR: ${{ github.event.pull_request.html_url }}
 
     steps:
+      - name: Check out repo
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
       - name: Label as engineering
         run: gh pr edit $PR --add-label engineering
 

.github/workflows/hubber-contribution-help.yml

@@ -13,6 +13,7 @@ on:
       - 'data/**'
 
 permissions:
+  contents: read
   pull-requests: write
 
 jobs: