Structure equivalent to backport trigger

.github/workflows/rebase-trigger.yml

@@ -5,8 +5,27 @@ on:
     types: [created]
 
 jobs:
-  launchRebaseBuild:
+  setupRebase:
     runs-on: ubuntu-latest
+    # GITHUB_TOKEN change from read-write to read-only on 2024-02-01 requires permissions block
+    # https://docs.opensource.microsoft.com/github/apps/permission-changes/
+    # https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
+    permissions:
+      actions: write
+      contents: read
+      security-events: write
+    if: github.event.issue.pull_request != '' && contains(github.event.comment.body, '@gitbot rebase')
+    steps:
+      - name: Show Comment
+        shell: pwsh
+        id: show_comment
+        run: |
+          Write-Host "Comment: ${env:COMMENT}"
+        env:
+          COMMENT: "${{ github.event.comment.body }}"
+
+  launchRebaseBuild:
+    needs: setupRebase
     uses: xamarin/rebase-bot-action/.github/workflows/[email protected]
     # GITHUB_TOKEN change from read-write to read-only on 2024-02-01 requires permissions block
     # https://docs.opensource.microsoft.com/github/apps/permission-changes/
@@ -28,5 +47,4 @@ jobs:
       ado_project: ${{ secrets.ADO_PROJECT }}
       rebase_pipeline_id: ${{ secrets.REBASE_PIPELINEID }}
       github_account_pat: ${{ secrets.SERVICEACCOUNT_PAT }}
-    if: github.event.issue.pull_request != '' && contains(github.event.comment.body, '@gitbot rebase')