ci(scorecard): add correct perm

Signed-off-by: Josef Andersson <[email protected]>

Author: janderssonse

.github/workflows/openssfscorecard.yml

@@ -17,4 +17,9 @@ permissions:
 
 jobs:
   scorecard-analysis:
+    
+  permissions:
+    contents: read
+    security-events: write
+    id-token: write
     uses: itiquette/.github/.github/workflows/openssf-scorecard.yml@main