diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index c7a9a44..f1075e6 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -7,21 +7,20 @@ on:
   push:
     branches: [main]
 
-permissions: read-all
+permissions:
+  contents: read
+  id-token: write
+  security-events: write
 
 jobs:
   scorecard:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-      security-events: write
     steps:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
       - name: Run OpenSSF Scorecard
-        uses: ossf/scorecard-action@v2.4.2
+        uses: ossf/scorecard-action@v2.4.4
         with:
           results_file: scorecard-results.sarif
           results_format: sarif
diff --git a/docs/OWASP-GenAI-LLM-Top-10-2026-v1.0.pdf b/docs/OWASP-GenAI-LLM-Top-10-2026-v1.0.pdf
new file mode 100644
index 0000000..1fcf233
Binary files /dev/null and b/docs/OWASP-GenAI-LLM-Top-10-2026-v1.0.pdf differ