ci: add `id-token: write` permission to scorecard github workflow
@@ -18,6 +18,7 @@ jobs:
actions: read
contents: read
security-events: write # Needed to upload results to code-scanning dashboard.
+ id-token: write
steps:
- name: Checkout
