diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 48a074f8a..691487a76 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -15,7 +15,7 @@ jobs:
       contents: read
       packages: read
       # seems needed for github/codeql-action/upload-sarif
-      actions: read
+      actions: write
 
     steps:
       - name: Checkout code