diff --git a/.github/workflows/mcp-conformance.yml b/.github/workflows/mcp-conformance.yml
index c0af853..50cd173 100644
--- a/.github/workflows/mcp-conformance.yml
+++ b/.github/workflows/mcp-conformance.yml
@@ -9,6 +9,9 @@ on:
 jobs:
   mcp-conformance:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
 
     steps:
       - name: Checkout Varden
@@ -101,4 +104,4 @@ jobs:
 
       - name: Stop Varden
         if: always()
-        run: kill $VARDEN_PID || true
+        run: kill $VARDEN_PID || true
\ No newline at end of file