diff --git a/code-scanning/scorecards.yml b/code-scanning/scorecards.yml
index eed834b..539794d 100644
--- a/code-scanning/scorecards.yml
+++ b/code-scanning/scorecards.yml
@@ -19,7 +19,9 @@ jobs:
       security-events: write
       # Used to receive a badge. (Upcoming feature)
       id-token: write
+      # Needs for private repositories.
       contents: read
+      actions: read
     
     steps:
       - name: "Checkout code"