diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 9a0e331817c0e..5a28d093de862 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -25,3 +25,15 @@ jobs:
       id-token: write
       contents: read
       actions: read
+      artifact-metadata: read
+      attestations: read
+      checks: read
+      deployments: read
+      discussions: read
+      issues: read
+      models: read
+      packages: read
+      pages: read
+      pull-requests: read
+      repository-projects: read
+      statuses: read