trails/.github
Ullrich Schäfer 52382427ef
Fix gitleaks permissions for dependabot PRs
Gitleaks needs explicit contents:read and pull-requests:read permissions
to scan dependabot PR commits. Without them, the GitHub API returns 403.

Ref: https://github.com/gitleaks/gitleaks/issues/1343#issuecomment-2690243151

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-25 10:52:03 +01:00
..
workflows Fix gitleaks permissions for dependabot PRs 2026-03-25 10:52:03 +01:00
dependabot.yml Security hardening: headers, scanning, Docker, firewall 2026-03-25 09:58:12 +01:00