diff --git a/.github/workflows/scanbuild_static-analysis.yml b/.github/workflows/scanbuild_static-analysis.yml
index e6d70b4fb9..76214c438e 100644
--- a/.github/workflows/scanbuild_static-analysis.yml
+++ b/.github/workflows/scanbuild_static-analysis.yml
@@ -2,6 +2,9 @@ name: LLVM Static Analysis
 
 on: push
 
+permissions:
+  security-events: write
+
 jobs:
 
 #