diff --git a/.github/workflows/docker-snyk.yml b/.github/workflows/docker-snyk.yml
index 28d70ccc32..0d028d5e98 100644
--- a/.github/workflows/docker-snyk.yml
+++ b/.github/workflows/docker-snyk.yml
@@ -15,6 +15,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      actions: write
 
     steps:
       - uses: actions/checkout@v3
@@ -29,6 +30,6 @@ jobs:
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
       - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: snyk.sarif