ci: allow scorecard result publishing

Author: krotname

.github/workflows/scorecard.yml

@@ -11,12 +11,14 @@ on:
 
 permissions:
   contents: read
-  security-events: write
-  id-token: write
 
 jobs:
   scorecard:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+      id-token: write
     steps:
       - name: Run Scorecard
         uses: ossf/scorecard-action@v2.4.0