Fix dependency-check workflow: add issues:write permission

[Copilot]

The dependency-check job fails with 403 "Resource not accessible by integration" when attempting to create GitHub issues for detected vulnerabilities.

Changes

• Added job-level issues: write permission to dependency-check job in .github/workflows/security.yml

The workflow has restrictive top-level permissions (contents: read, pull-requests: read) but the job uses github-script to create/update issues on failure, requiring explicit elevation:

jobs:
  dependency-check:
    name: Dependency Security Scan
    runs-on: ubuntu-latest
    permissions:
      contents: read
      issues: write

Follows principle of least privilege - only the job that needs issue access gets it.

Original prompt

Fix the failing GitHub Actions workflow Dependency Security Scan
Analyze the workflow logs, identify the root cause of the failure, and implement a fix.
Job ID: 62871189249
Job URL: https://github.com/brunoborges/jlib-inspector/actions/runs/21791362743/job/62871189249

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.