From 18d005d7e6805b95f50eebf02a43fa289fc795c8 Mon Sep 17 00:00:00 2001
From: Dane Evans <dane@goneepic.com>
Date: Fri, 1 Aug 2025 18:17:34 +1000
Subject: [PATCH] explicit ignores

---
 .github/workflows/main_matrix.yml | 1 +
 .github/workflows/merge_queue.yml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/main_matrix.yml b/.github/workflows/main_matrix.yml
index 0a72bdc3e..815b03c86 100644
--- a/.github/workflows/main_matrix.yml
+++ b/.github/workflows/main_matrix.yml
@@ -258,6 +258,7 @@ jobs:
       push: false
 
   gather-artifacts:
+    # trunk-ignore(checkov/CKV2_GHA_1)
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/merge_queue.yml b/.github/workflows/merge_queue.yml
index d3df35ac2..e2264e250 100644
--- a/.github/workflows/merge_queue.yml
+++ b/.github/workflows/merge_queue.yml
@@ -243,6 +243,7 @@ jobs:
       push: false
 
   gather-artifacts:
+    # trunk-ignore(checkov/CKV2_GHA_1)
     permissions:
       contents: write
       pull-requests: write