diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index a70a239..c81662b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -5,10 +5,8 @@ name: scorecard.yml — OpenSSF Scorecard
   push:
     branches:
       - main
-permissions:
-  actions: read
-  contents: read
-  security-events: write
+permissions: read-all
+
 jobs:
   analysis:
     name: Scorecard analysis