diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 7e8191e2..7e988992 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -33,6 +33,7 @@ jobs:
       # This is used to complete the identity challenge
       # with sigstore/fulcio when running outside of PRs.
       id-token: write
+      security-events: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3