diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 434aa88..1665b7d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -21,7 +21,9 @@ permissions:
 jobs:
   scorecard:
     permissions:
+      actions: read
       contents: read
+      id-token: write
       security-events: write
     uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@210f14e753c80064ec1bcae72f1d654dd9b0e687
     secrets: inherit