At the moment, Trigger Docs Build Workflow is a step of the Build and Deploy Snapshot job and the entire workflow has the write permission for GitHub Actions. We could move Trigger Docs Build Workflow into a separate job and grant the permission at the job level instead.