diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 7a410b760..8a54d9fbe 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -19,6 +19,7 @@ jobs:
       security-events: write
       actions: read
       contents: read
+      id-token: write
 
     steps:
       - name: "Checkout code"