diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 29a01b61..214357f9 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -31,8 +31,6 @@ jobs:
                     --health-retries 5
         permissions:
             contents: read
-            security-events: write
-            actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
         steps:
             - name: Checkout code
               uses: actions/checkout@v4