diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 1ac34e818c1dc..87750d69ce792 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -35,6 +35,8 @@ jobs:
       run: ./gradlew checkCopyrightsInNoticeFile checkLicenseHeaders checkGitAttributes
   detekt-issues:
     runs-on: ubuntu-22.04
+    permissions:
+      security-events: write
     steps:
     - name: Checkout Repository
       uses: actions/checkout@v4
@@ -79,6 +81,8 @@ jobs:
   qodana-scan:
     if: ${{ github.event_name == 'pull_request' }}
     runs-on: ubuntu-22.04
+    permissions:
+      security-events: write
     steps:
     - name: Checkout Repository
       uses: actions/checkout@v4