update

Signed-off-by: laurentsimon <laurentsimon@google.com>

main.go

@@ -17,7 +17,6 @@ package main
 import (
 	"log"
 	"os"
-	"strings"
 
 	"github.com/ossf/scorecard-action/entrypoint"
 	"github.com/ossf/scorecard-action/options"
@@ -35,7 +34,8 @@ func main() {
 	}
 
 	if os.Getenv(options.EnvInputPublishResults) == "true" &&
-		!strings.HasPrefix(os.Getenv("GITHUB_EVENT_NAME"), "pull_request") {
+		// `pull_request` do not have the necessary `token-id: write` permissions.
+		os.Getenv("GITHUB_EVENT_NAME") != "pull_request" {
 		// Get json results by re-running scorecard.
 		jsonPayload, err := signing.GetJSONScorecardResults()
 		if err != nil {