diff --git a/.github/workflows/on-prerelease.yml b/.github/workflows/on-prerelease.yml
index a0b96ca3a..5bdf83fda 100644
--- a/.github/workflows/on-prerelease.yml
+++ b/.github/workflows/on-prerelease.yml
@@ -250,6 +250,8 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - publish-package
+    permissions:
+      security-events: write
     steps:
       - name: Wait 20s
         # Give Azure Artifacts caching a moment to catch up