build: update scorecard config (#26994)

Updates the scoredcard config to include the ID token.

Author: crisbeto

.github/workflows/scorecard.yml

@@ -8,7 +8,8 @@ on:
   workflow_dispatch:
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   analysis:
@@ -17,6 +18,8 @@ jobs:
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write
+      # Needed to publish results
+      id-token: write
       actions: read
       contents: read