From 00e08539ca5ff25307997d8c845296376a1cd858 Mon Sep 17 00:00:00 2001
From: laurentsimon <laurentsimon@google.com>
Date: Mon, 10 Jan 2022 23:19:46 +0000
Subject: [PATCH] prepare release

---
 code-scanning/scorecards.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/code-scanning/scorecards.yml b/code-scanning/scorecards.yml
index 8b2346a..ba42ef0 100644
--- a/code-scanning/scorecards.yml
+++ b/code-scanning/scorecards.yml
@@ -17,6 +17,8 @@ jobs:
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write
+      actions: read
+      contents: read
     
     steps:
       - name: "Checkout code"
@@ -34,8 +36,8 @@ jobs:
           repo_token: ${{ secrets.SCORECARD_TOKEN }}
           # Publish the results to enable scorecard badges. For more details, see
           # https://github.com/ossf/scorecard-action#publishing-results.
-          # If you are installing the action on a private repo, set it to `publish_results: false` 
-          # or comment out the following line.
+          # Note: for private repositories, the value of `publish_results` set here
+          # is ignored and defaults to false.
           publish_results: true
 
       # Upload the results as artifacts (optional).