diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 015587a36..439f32c66 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -11,3 +11,5 @@ jobs:
     permissions:
       security-events: write
       statuses: write
+      contents: read
+      actions: read