diff --git a/docs/getting_started.md b/docs/getting_started.md
index eed02826c..45c86c3b1 100644
--- a/docs/getting_started.md
+++ b/docs/getting_started.md
@@ -73,3 +73,11 @@ request is merged it'll be published automatically. See the
 [ruby-version]: ../.ruby-version
 [pull-request]: https://gds-way.cloudapps.digital/standards/pull-requests.html
 [deployment]: ./deployment.md
+
+## Scorecard action
+
+Note that there is a scorecard action. This relies on a token to access parts of
+the repository. The token expires periodically.
+
+See the [scorecard-action README](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)
+for instructions on updated the token.