@@ -1 +1 @@
-Workflow runs triggered by {% data variables.product.prodname_dependabot %} pull requests run as if they are from a forked repository, and therefore use a read-only `GITHUB_TOKEN`. These workflow runs cannot access any secrets. For information about strategies to keep these workflows secure, see [AUTOTITLE](/actions/reference/security/secure-use).
+By default, workflow runs triggered by {% data variables.product.prodname_dependabot %} pull requests use a read-only `GITHUB_TOKEN` and cannot access secrets other than {% data variables.product.prodname_dependabot %} secrets. You can use the `permissions` key in your workflow to increase the access for the token. For more information, see [AUTOTITLE](/code-security/reference/supply-chain-security/troubleshoot-dependabot/dependabot-on-actions). For information about strategies to keep these workflows secure, see [AUTOTITLE](/actions/reference/security/secure-use).
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		-Workflow runs triggered by {% data variables.product.prodname_dependabot %} pull requests run as if they are from a forked repository, and therefore use a read-only `GITHUB_TOKEN`. These workflow runs cannot access any secrets. For information about strategies to keep these workflows secure, see [AUTOTITLE](/actions/reference/security/secure-use).
	`1`	+By default, workflow runs triggered by {% data variables.product.prodname_dependabot %} pull requests use a read-only `GITHUB_TOKEN` and cannot access secrets other than {% data variables.product.prodname_dependabot %} secrets. You can use the `permissions` key in your workflow to increase the access for the token. For more information, see [AUTOTITLE](/code-security/reference/supply-chain-security/troubleshoot-dependabot/dependabot-on-actions). For information about strategies to keep these workflows secure, see [AUTOTITLE](/actions/reference/security/secure-use).