diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 34446621..0fa9f18d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -6,7 +6,12 @@ on:
   pull_request:
     branches: [master]
   schedule:
-    - cron: '0 17 * * 1,3,5'
+    - cron: '0 3 * * */2'
+
+permissions:
+  security-events: write
+  actions: read
+  contents: read
 
 jobs:
   analyse:
@@ -15,7 +20,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         fetch-depth: 2