diff --git a/.github/workflows/MSDO.yml b/.github/workflows/MSDO.yml
index 3a4cf79c0f..c31c8acded 100644
--- a/.github/workflows/MSDO.yml
+++ b/.github/workflows/MSDO.yml
@@ -6,14 +6,13 @@ on:
   pull_request:
     branches: [ "main", "releases/*" ]
 
-permissions:
-  id-token: write # This is required for federation to Defender for DevOps
-  security-events: write # This is required to upload SARIF files
-
 jobs:
   MSDO:
     name: Run Microsoft Security DevOps Analysis
-    runs-on: ubuntu-latest
+    runs-on: windows-latest
+    permissions:
+      id-token: write # This is required for federation to Defender for DevOps
+      security-events: write # This is required to upload SARIF files
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4