diff --git a/.github/workflows/java-maven-openjdk-dependency-review.yml b/.github/workflows/java-maven-openjdk-dependency-review.yml
index ba067fc..6d11722 100644
--- a/.github/workflows/java-maven-openjdk-dependency-review.yml
+++ b/.github/workflows/java-maven-openjdk-dependency-review.yml
@@ -109,9 +109,7 @@ jobs:
     uses: coveo/public-actions/.github/workflows/java-maven-openjdk-dependency-submission.yml@main
 
     permissions:
-      actions: read
       contents: write
-      security-events: write
 
     with:
       runs-on: ${{ inputs.runs-on }}
diff --git a/.github/workflows/java-maven-openjdk-dependency-submission.yml b/.github/workflows/java-maven-openjdk-dependency-submission.yml
index d068ab1..0630bfe 100644
--- a/.github/workflows/java-maven-openjdk-dependency-submission.yml
+++ b/.github/workflows/java-maven-openjdk-dependency-submission.yml
@@ -43,9 +43,7 @@ jobs:
       image: maven:${{ inputs.mvn-version }}-eclipse-temurin-${{ inputs.jdk-version }}
 
     permissions:
-      actions: read
       contents: write
-      security-events: write
 
     steps:
       - name: Checkout repository