diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 71287d5..91152bf 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,6 +26,7 @@ permissions:
   contents: read
   security-events: write  # Required for uploading SARIF results
   actions: read           # Required for workflow status
+  checks: write           # Required for creating check runs
 
 concurrency:
   group: codeql-${{ github.workflow }}-${{ github.ref }}