diff --git a/.github/workflows/sonarcloud-scan.yml b/.github/workflows/sonarcloud-scan.yml
index be4676844..a46779748 100644
--- a/.github/workflows/sonarcloud-scan.yml
+++ b/.github/workflows/sonarcloud-scan.yml
@@ -18,6 +18,8 @@ on:
     branches:
       - main
 
+permissions: write-all
+
 jobs:
   build-and-test:
     concurrency: ghpages-${{ github.ref }}
@@ -91,7 +93,7 @@ jobs:
 
       - name: SonarCloud Scan - Core 🚨
         if: env.COVERAGE_CORE == 'true'
-        uses: sonarsource/sonarcloud-github-action@v2.0.2
+        uses: sonarsource/sonarcloud-github-action@v3.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
@@ -100,7 +102,7 @@ jobs:
 
       - name: SonarCloud Scan - Tokens 🚨
         if: env.COVERAGE_TOKENS == 'true'
-        uses: sonarsource/sonarcloud-github-action@v2.0.2
+        uses: sonarsource/sonarcloud-github-action@v3.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}