diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index a646644..5e53c55 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -11,6 +11,11 @@ jobs:
   snyk:
     runs-on: ubuntu-latest
     name: Snyk
+    permissions:
+      actions: read
+      contents: read
+      statuses: read
+      security-events: write
     strategy:
       max-parallel: 4
       matrix: