diff --git a/.github/workflows/preflight-checker-workflow.yml b/.github/workflows/preflight-checker-workflow.yml
index ce507f0a..6b573fb2 100644
--- a/.github/workflows/preflight-checker-workflow.yml
+++ b/.github/workflows/preflight-checker-workflow.yml
@@ -6,6 +6,10 @@ on:
     branches: [ "main" ]
   workflow_dispatch:
 
+permissions:
+ contents: read
+ security-events: write
+
 jobs:
   checker:
     uses: qualcomm-linux/qli-actions/.github/workflows/multi-checker.yml@main