diff --git a/.github/workflows/lintr.yml b/.github/workflows/lintr.yaml
similarity index 61%
rename from .github/workflows/lintr.yml
rename to .github/workflows/lintr.yaml
index de0d74e..d055364 100644
--- a/.github/workflows/lintr.yml
+++ b/.github/workflows/lintr.yaml
@@ -7,10 +7,10 @@ on:
   pull_request:
     branches: master
 
-permissions:
-  contents: read
-
 jobs:
   lintr:
+    permissions:
+      # for github/codeql-action/upload-sarif to upload SARIF results
+      security-events: write
     uses: pdil/usmapdata/.github/workflows/lintr.yaml@master
     secrets: inherit