diff --git a/.github/workflows/DAST-ZAP-Zed-Attach-Proxy-Checkmarx.yml b/.github/workflows/DAST-ZAP-Zed-Attach-Proxy-Checkmarx.yml
index ce1e662..63b50e5 100644
--- a/.github/workflows/DAST-ZAP-Zed-Attach-Proxy-Checkmarx.yml
+++ b/.github/workflows/DAST-ZAP-Zed-Attach-Proxy-Checkmarx.yml
@@ -22,6 +22,7 @@ env:
 
 permissions:
   contents: read 
+  security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
   #issues: write # to create issues for alerts
 
 jobs: