add content:read permission to scorecard workflow (#2261)

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

diff --git a/.github/workflows/weekly.yml b/.github/workflows/weekly.yml
index d9f358173e34d7b632a2ffba8734de3834accd90..d04bf101b051ae1274e99e60b9fd0578c61bdb61 100644 (file)
--- a/.github/workflows/weekly.yml
+++ b/.github/workflows/weekly.yml
@@ -17,6 +17,7 @@ jobs:
     permissions:
       id-token: write
       security-events: write
+      contents: read
 
   extended-tests:
     uses: ./.github/workflows/extended.yml