Merge branch 'main' into chore/maintain-lockfiles-weekly

yxtay · web-flow · commit 31686e07549d · 2025-03-06T19:07:04.000+08:00
diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml
@@ -12,7 +12,7 @@ concurrency:
 jobs:
   dependabot:
     permissions:
-      contents: read
+      contents: write
       pull-requests: write
 
     if: ${{ github.actor == 'dependabot[bot]' }}
@@ -36,7 +36,7 @@ jobs:
 
   pre-commit-ci:
     permissions:
-      contents: read
+      contents: write
       pull-requests: write
 
     if: ${{ github.actor == 'pre-commit-ci' }}
diff --git a/trivy.yaml b/trivy.yaml
@@ -0,0 +1,2 @@
+scan:
+  skip-files: ["*.lock"]
