Moving from internal, by @pelikhan We currently always emit actions/checkout even when contents: read is not in the permissions. This breaks the action run.