fix(ci): as of v2 Scorecard requires extra permissions (#366)

Author: jenstroeger

.github/workflows/scorecards-analysis.yaml

@@ -21,6 +21,8 @@ jobs:
       security-events: write
       actions: read
       contents: read
+      # Needed to access OIDC token.
+      id-token: write
     steps:
 
     - name: Harden Runner