From b5a9e0f1e8eb778c1f653248b36d0c2fd23b955e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 19 Oct 2026 17:41:48 +0000
Subject: [PATCH 1/2] Initial plan


From 8e18cbbf474d76e2183b607c622c9a64e5ccb0fe Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 19 Oct 2026 17:44:07 +0000
Subject: [PATCH 2/2] Allow scheduled advisory reports to create issues

Co-authored-by: schreck61 <2614386+schreck61@users.noreply.github.com>
---
 .github/workflows/ci.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8c6be7a..84c5baa 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -180,6 +180,7 @@ jobs:
     permissions:
       contents: read
       checks: write # audit-check posts its report as a check run
+      issues: write # audit-check posts scheduled reports as issues
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
@@ -187,6 +188,4 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           # Mirrors deny.toml: ttf-parser is unmaintained but reaches us
           # only through winit's Wayland titlebar path; no fix exists yet.
-          # (Un-ignored warnings also make the action file issues, which
-          # this job has no permission to do.)
           ignore: RUSTSEC-2026-0192