diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 19cb22d4..f27889f0 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -1,5 +1,5 @@
 name: Coverity Scan
-
+permissions: read-all
 on:
   push:
     branches: [main]