diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 68b003c..25afee4 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -10,5 +10,6 @@ on:
 jobs:
   call-workflow-semgrep:
     permissions:
+      contents: read
       security-events: write
     uses: gsoft-inc/wl-reusable-workflows/.github/workflows/reusable-semgrep-workflow.yml@main