Gitleaks needs explicit contents:read and pull-requests:read permissions to scan dependabot PR commits. Without them, the GitHub API returns 403. Ref: https://github.com/gitleaks/gitleaks/issues/1343#issuecomment-2690243151 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| workflows | ||
| dependabot.yml | ||