diff --git a/.github/workflows/codeql-daily.yml b/.github/workflows/codeql-daily.yml
index dda5a6d567a9..35caafe536af 100644
--- a/.github/workflows/codeql-daily.yml
+++ b/.github/workflows/codeql-daily.yml
@@ -9,7 +9,6 @@ on:
 permissions:
   contents: read
 
-
 jobs:
   analyze:
     permissions:
@@ -48,6 +47,8 @@ jobs:
         uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
 
   workflow-notification:
+    permissions:
+      issues: write
     needs:
       - analyze
     if: always()