Reduce scorecard workflow permissions scope

Signed-off-by: robert-cronin <[email protected]>
guacsec · Nov 29, 2024 · c7f93be · c7f93be
1 parent 6dc5c0a
commit c7f93be
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -15,7 +15,9 @@ on:
     branches: [ "main" ]
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   analysis: