diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ddf6652..1768f49 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -6,7 +6,10 @@ on:
   schedule:
     - cron: '23 4 * * 1'
 
-permissions: read-all
+permissions:
+  contents: read
+  security-events: write
+  id-token: write
 
 jobs:
   analysis:
diff --git a/.mise.toml b/.mise.toml
new file mode 100644
index 0000000..cb01a7a
--- /dev/null
+++ b/.mise.toml
@@ -0,0 +1,3 @@
+[tools]
+rust = "nightly"
+just = "1.46.0"
diff --git a/.tool-versions b/.tool-versions
deleted file mode 100644
index affb232..0000000
--- a/.tool-versions
+++ /dev/null
@@ -1,2 +0,0 @@
-rust nightly
-just 1.46.0