diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
index a2669351c..f65762f1f 100644
--- a/.github/workflows/sast.yml
+++ b/.github/workflows/sast.yml
@@ -8,6 +8,7 @@ on:
 
 permissions:
   contents: read
+  security-events: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}