diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 84fa1b6..2852813 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -1,5 +1,5 @@
 name: Coverity Scan
-
+permissions: read-all
 on:
   push:
     branches: [main]