diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d6a48fb..1c82750 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -6,9 +6,7 @@ on:
   pull_request:
     branches: [ 10.8 ]
 
-permissions:
-  contents: write
-  packages: read
+permissions: write-all
 
 jobs:
   analyze: