diff --git a/scripts/validate/changelog.sh b/scripts/validate/changelog.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/language_structure.sh b/scripts/validate/language_structure.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/license_headers.sh b/scripts/validate/license_headers.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/manifest.sh b/scripts/validate/manifest.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/no_secrets.sh b/scripts/validate/no_secrets.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/paths.sh b/scripts/validate/paths.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/php_syntax.sh b/scripts/validate/php_syntax.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/tabs.sh b/scripts/validate/tabs.sh
old mode 100644
new mode 100755
index bd2394b..77f66c8
--- a/scripts/validate/tabs.sh
+++ b/scripts/validate/tabs.sh
@@ -4,8 +4,9 @@ set -euo pipefail
 # Detect TAB characters in source files tracked by Git. Uses careful
 # handling of filenames and avoids heredoc pitfalls.
 
-# Limit file globs as appropriate for the repo
-files=$(git ls-files '*.php' '*.js' '*.py' || true)
+# Check only YAML/YML files where tabs are not allowed by the YAML specification.
+# Note: Other file types (PHP, JS, etc.) allow tabs per .editorconfig.
+files=$(git ls-files '*.yml' '*.yaml' || true)
 
 if [ -z "${files}" ]; then
   echo "No files to check"
diff --git a/scripts/validate/version_alignment.sh b/scripts/validate/version_alignment.sh
old mode 100644
new mode 100755
diff --git a/scripts/validate/xml_wellformed.sh b/scripts/validate/xml_wellformed.sh
old mode 100644
new mode 100755