diff --git a/.github/workflows/public-ci.yml b/.github/workflows/public-ci.yml
index 61e9e0c..404cb27 100644
--- a/.github/workflows/public-ci.yml
+++ b/.github/workflows/public-ci.yml
@@ -120,7 +120,9 @@ jobs:
 # Trivy Scan
   trivy-scan:
     runs-on: ubuntu-latest
-    permissions: write-all
+    permissions: 
+      contents: read
+      security-events: write
     steps: 
 
     - name: Checkout code