Update scorecard.yml

Signed-off-by: Matthieu MOREL <[email protected]>
envoyproxy · Jan 5, 2024 · 42b51fa · 42b51fa
1 parent 2d493c5
commit 42b51fa
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -1,6 +1,7 @@
 name: Scorecard supply-chain security
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   # For Branch-Protection check. Only the default branch is supported. See