diff --git a/.github/workflows/frogbot-scan-pull-request.yml b/.github/workflows/frogbot-scan-pull-request.yml
index 0300d6b40..d273c6dd4 100644
--- a/.github/workflows/frogbot-scan-pull-request.yml
+++ b/.github/workflows/frogbot-scan-pull-request.yml
@@ -4,6 +4,7 @@ on:
   workflow_dispatch:
 permissions:
   pull-requests: write
+  security-events: write
   contents: read
 jobs:
   scan-pull-request: