diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ae79ce0..f3ee831 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -7,12 +7,12 @@ on:
     - cron: '23 4 * * 1'
 
 permissions: read-all
-  actions: read
 
 jobs:
   analysis:
     uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
     permissions:
+      actions: read
       contents: read
       security-events: write
       id-token: write