diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index a5f737e4..51152ca5 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -12,6 +12,8 @@ on:
 permissions:
   actions: read
   contents: read
+  id-token: write
+  security-events: write
 
 jobs:
   analysis: