github: add new required permissions for ossf/scorecard
@@ -17,8 +17,8 @@ jobs:
permissions:
# Needed to upload the results to code-scanning dashboard.
security-events: write
- actions: read
- contents: read
+ id-token: write
+ publish_results: true
steps:
- name: "Checkout code"
