diff --git a/auto-merge/contrib/.github/workflows/codeql-analysis.yml b/auto-merge/contrib/.github/workflows/codeql-analysis.yml
index 317759ac5..81bc429b6 100644
--- a/auto-merge/contrib/.github/workflows/codeql-analysis.yml
+++ b/auto-merge/contrib/.github/workflows/codeql-analysis.yml
@@ -17,6 +17,8 @@ on:
 jobs:
   CodeQL-Build:
     runs-on: ubuntu-latest
+    permissions:
+      security-events: write
 
     steps:
       - name: Checkout repository
diff --git a/auto-merge/js/.github/workflows/codeql-analysis.yml b/auto-merge/js/.github/workflows/codeql-analysis.yml
index f67b78fe0..90699e8a4 100644
--- a/auto-merge/js/.github/workflows/codeql-analysis.yml
+++ b/auto-merge/js/.github/workflows/codeql-analysis.yml
@@ -9,6 +9,8 @@ on:
 jobs:
   CodeQL-Build:
     runs-on: ubuntu-latest
+    permissions:
+      security-events: write
 
     steps:
       - name: Checkout repository