From 4bd87ace27db0f5703bcef7172094c044b284a33 Mon Sep 17 00:00:00 2001
From: Connor Hickey <33135619+Conalh@users.noreply.github.com>
Date: Thu, 21 May 2026 16:30:06 -0700
Subject: [PATCH] ci: dogfood ScopeTrail permission drift review

---
 .github/workflows/scopetrail.yml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/workflows/scopetrail.yml

diff --git a/.github/workflows/scopetrail.yml b/.github/workflows/scopetrail.yml
new file mode 100644
index 0000000..31f6158
--- /dev/null
+++ b/.github/workflows/scopetrail.yml
@@ -0,0 +1,19 @@
+name: ScopeTrail
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  permission-drift:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: Conalh/ScopeTrail@v0.1.6
+        with:
+          fail-on: none