diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fca0fd207..700226613 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -65,6 +65,9 @@ jobs:
 
   # Android lint is per-variant
   lint:
+    permissions:
+      # Required to upload SARIF files
+      security-events: write
     strategy:
       matrix:
         color: ["orange"]