diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 1ce7078..8958652 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -33,6 +33,8 @@ on:
 
 permissions:
   actions: read
+  contents: read
+  security-events: write
 
 jobs:
   codeql-analyze: