diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 576969c1..941956ec 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -9,9 +9,7 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
     permissions:
-      contents: read
       security-events: write
-      pull-requests: read
 
     strategy:
       fail-fast: false