diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b5e21ca..0d9966d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -7,11 +7,12 @@ on:
     - cron: '23 4 * * 1'
 
 permissions: read-all
-  actions: read
 
 jobs:
   analysis:
     permissions:
+      actions: read
+      contents: read
       security-events: write
       id-token: write
     uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3