Template drift: raybeam vs go-app

[github-actions]

Template drift detected

Repo: netresearch/raybeam
Template: go-app (netresearch/.github)
Scan date: 2026-05-18T07:36:17Z

Auto-opened by .github/workflows/drift-scan.yml. Resolve by running
scripts/sync-template.sh go-app netresearch/raybeam, then opening
the generated PR in the consumer repo.

If the drift is intentional, add an entry to netresearch/raybeam's
.github/template.yaml intentional-drift: list and close this issue.

Drift output

Differing files:
  - .github/workflows/scorecard.yml

=== diff: .github/workflows/scorecard.yml ===
--- /home/runner/work/.github/.github/consumer/.github/workflows/scorecard.yml	2026-05-18 07:36:17.201535904 +0000
+++ /home/runner/work/.github/.github/templates-src/templates/go-app/.github/workflows/scorecard.yml	2026-05-18 07:36:16.140266689 +0000
@@ -7,7 +7,7 @@
     - cron: '0 0 * * 0'
   workflow_dispatch:
 
-permissions: read-all
+permissions: {}
 
 jobs:
   scorecard:

[CybotTM]

Resolved by netresearch/raybeam#236 (merged).