diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9ca5f66..d6a48fb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -2,12 +2,13 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ master ]
+    branches: [ 10.8 ]
   pull_request:
-    branches: [ master ]
+    branches: [ 10.8 ]
 
 permissions:
   contents: write
+  packages: read
 
 jobs:
   analyze: