Description
pkg/parser/schemas/main_workflow_schema.json's $defs.github_actions_permissions does not include secret-scanning-alerts, even though pkg/workflow/permissions.go:101 defines PermissionSecretScanningAlerts and pkg/workflow/safe_outputs_app_config.go:563 emits permission-secret-scanning-alerts. A frontmatter file using this parser-supported permission can fail schema validation and won't appear in schema-generated docs.
Expected Impact
Closes a schema/parser drift gap so secret-scanning-alerts frontmatter validates correctly and shows up in generated docs — prevents false-negative validation failures for a permission the compiler already supports.
Suggested Agent
Schema Consistency Checker (found it) or a general code-fix agent — one-line schema enum addition.
Estimated Effort
Quick (< 1 hour)
Data Source
DeepReport analysis of Schema Consistency Checker report (discussion #54737, 2026-08-22), finding #1.
Generated by 🔬 Deep Report · agent · 109.8 AIC · ⌖ 8.86 AIC · ⊞ 12.4K · ◷
Description
pkg/parser/schemas/main_workflow_schema.json's$defs.github_actions_permissionsdoes not includesecret-scanning-alerts, even thoughpkg/workflow/permissions.go:101definesPermissionSecretScanningAlertsandpkg/workflow/safe_outputs_app_config.go:563emitspermission-secret-scanning-alerts. A frontmatter file using this parser-supported permission can fail schema validation and won't appear in schema-generated docs.Expected Impact
Closes a schema/parser drift gap so
secret-scanning-alertsfrontmatter validates correctly and shows up in generated docs — prevents false-negative validation failures for a permission the compiler already supports.Suggested Agent
Schema Consistency Checker (found it) or a general code-fix agent — one-line schema enum addition.
Estimated Effort
Quick (< 1 hour)
Data Source
DeepReport analysis of Schema Consistency Checker report (discussion #54737, 2026-08-22), finding #1.