Merge pull request #3985 from facebook/scorecard_permission

try to silence some scorecard warnings