diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
index e68aeee..31ebcdc 100644
--- a/.github/workflows/pipeline.yml
+++ b/.github/workflows/pipeline.yml
@@ -22,6 +22,7 @@ jobs:
   trivy-scan:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       security-events: write # upload-sarif
     steps:
       - name: Checkout code