chore: add id-token permissions to scorecard-action (#8971)

See ossf/scorecard-action#900

Example failure with scorecard-action@2 https://github.com/puppeteer/puppeteer/actions/runs/3066712334/jobs/4952194627
This commit is contained in:
Alex Rudenko 2022-09-19 08:24:16 +02:00 committed by GitHub
parent 58c6eab429
commit 6f37eed91b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -20,6 +20,8 @@ jobs:
security-events: write
actions: read
contents: read
# Needed to access OIDC token.
id-token: write
steps:
- name: 'Checkout code'