A repository uses issue labels to separate planning tasks from implementation tasks. Planning issues use the label agent-plan, while implementation issues use agent-execute. The team wants a lightweight workflow that validates planning issues without granting write permissions or creating pull requests. Which option completes the workflow?

The correct answer allows the workflow to read issue information without modifying pull requests, and executes a shell command for validation. Missing value 1 = read: The workflow needs issues: read permission to access the issue's title and labels, which are used in the if condition and the run step. Missing value 2 = none: The problem statement specifies "without granting write permissions or creating pull requests." Setting pull-requests: none ensures the workflow cannot interact with pull requests. Missing value 3 = run: The run keyword executes shell commands directly within the workflow step. This is appropriate for the test command and echo statement provided. Incorrect options: Setting issues: write or pull-requests: write would grant unnecessary permissions, violating the "without granting write permissions" requirement. Using uses instead of run would imply calling an action, not executing inline shell commands.