diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index f99aa251a..fe9a149cf 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -16,9 +16,14 @@ on:
     - cron: '27 1 * * 0'
 
 permissions:
-  actions: read
-  contents: read
-  security-events: write
+  statuses: read          # Small reduction of attack
+  checks: read            # Small reduction of attack
+  security-events: write  # Small reduction of attack
+  deployments: read       # Small reduction of attack
+  
+  contents: read          # Large reduction of attack
+  packages: read          # Large reduction of attack
+  actions: none           # Large reduction of attack
 
 # This allows a subsequently queued workflow run to interrupt previous runs
 concurrency:
diff --git a/roiScript/issue_timestamp.log b/roiScript/issue_timestamp.log
index 8b1378917..de5f80ada 100644
--- a/roiScript/issue_timestamp.log
+++ b/roiScript/issue_timestamp.log
@@ -1 +1,2 @@
 
+andrewalson, issue #959: 2024-10-16 19:19:30