diff --git a/.github/workflows/security-fast.yml b/.github/workflows/security-fast.yml
index 61faaa9..45d7f72 100644
--- a/.github/workflows/security-fast.yml
+++ b/.github/workflows/security-fast.yml
@@ -9,7 +9,8 @@ on:
 permissions:
   contents: read
   pull-requests: read
-  security-events: write  # Required for rustsec/audit-check SARIF upload
+  checks: write  # Required for rustsec/audit-check to create check runs
+  security-events: write
 
 env:
   CARGO_TERM_COLOR: always