diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b8f202ca0..294b76072 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -38,7 +38,7 @@ jobs:
       # actions/upload-artifact doesn't need contents: write
       contents: read
       actions: read
-      security-events: read
+      security-events: write
     strategy:
         fail-fast: true
         matrix: