_version = 1

# The patch-cves prompt has the agent open one PR per alert group directly
# via `gh` (see prompts/patch-cves.md). Disable fabro's run-branch finalization
# PR so the two mechanisms don't race — the agent owns PR creation here.
[run.pull_request]
enabled = false

# GitHub App installation-token permissions requested for this run. These are a
# pass-through to the token mint and are further bounded by what the Fabro
# GitHub App is actually granted at the App level. The patch-cves prompt
# needs to read Dependabot alerts, push branches, and open PRs.
[run.integrations.github.permissions]
vulnerability_alerts = "read"   # Dependabot alerts (gh api .../dependabot/alerts)
contents = "write"              # branch + commit dependency/lockfile edits
pull_requests = "write"         # open the patch PRs
checks = "read"                 # gh pr checks --watch