diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index aa959c7..316d519 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -15,7 +15,7 @@ jobs:
   trivy-scan:
     name: Trivy Security Scan
     runs-on: ubuntu-latest
-    permissions:
+    permissions: write
       contents: read
       security-events: write
       actions: read