diff --git a/.github/workflows/CodeQL_PR_Analysis.yml b/.github/workflows/CodeQL_PR_Analysis.yml
index c747482..9541cbf 100644
--- a/.github/workflows/CodeQL_PR_Analysis.yml
+++ b/.github/workflows/CodeQL_PR_Analysis.yml
@@ -1,4 +1,7 @@
 name: "CodeQL PR Analysis"
+permissions:
+  contents: read
+  security-events: write
 
 on:
   pull_request:
@@ -49,4 +52,4 @@ jobs:
         run: dotnet build src/RandomAPI/RandomAPI.csproj
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
\ No newline at end of file
+        uses: github/codeql-action/analyze@v3