SONARJAVA-7186 Set contents rights to 'write' in the unified dogfooding workflow

[aurelien-coet-sonarsource]

---

Summary by Gitar

• Permissions:
  • Changed contents permission from read to write for the Build for Shadow Scan and Run IRIS jobs in unified-dogfooding.yml

_{This will update automatically on new commits.}

[hashicorp-vault-sonar-prod]

SONARJAVA-7186

[gitar-bot]

Code Review ✅ Approved

🔴 High risk · Granting the Build for Shadow Scan workflow contents: write could let a compromised or misused job modify repository contents.

Grants contents: write permission to the Build for Shadow Scan and Run IRIS jobs in unified-dogfooding.yml, changing it from read. No issues found.

Verification

Functional validation No results

Rules No rules evaluated

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[BartLucien]

LGTM

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube