diff --git a/.github/workflows/sdlc.yml b/.github/workflows/sdlc.yml
index 36f85d36..43cb3315 100644
--- a/.github/workflows/sdlc.yml
+++ b/.github/workflows/sdlc.yml
@@ -10,7 +10,11 @@ on:
 jobs:
   codeql:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
+      - uses: actions/checkout@v4
+
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2
         with: