diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml
index d840d234..0b0efbcd 100644
--- a/.github/workflows/reviewdog.yml
+++ b/.github/workflows/reviewdog.yml
@@ -237,6 +237,7 @@ jobs:
     permissions:
       contents: read
       actions: read
+      security-events: write
     name: reviewdog (sarif)
     runs-on: ubuntu-latest
     steps: