diff --git a/code-scanning/anchore.yml b/code-scanning/anchore.yml
index b0e542e..a3d2eed 100644
--- a/code-scanning/anchore.yml
+++ b/code-scanning/anchore.yml
@@ -28,6 +28,7 @@ jobs:
     permissions:
       contents: read # for actions/checkout to fetch code
       security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status 
     runs-on: ubuntu-latest
     steps:
     - name: Checkout the code