diff --git a/knowledge-base/actions/k1LoW/octocov-action/action-security.yml b/knowledge-base/actions/k1LoW/octocov-action/action-security.yml
new file mode 100644
index 00000000..df8dbf85
--- /dev/null
+++ b/knowledge-base/actions/k1LoW/octocov-action/action-security.yml
@@ -0,0 +1,12 @@
+name: 'GitHub Action for octocov'
+github-token:
+  action-input:
+    input: repo_token
+    is-default: true
+  permissions:
+    # To comment on PRs
+    pull-requests: write
+    # To retrieve test step time in GitHub Action
+    contents: read
+    # To retrieve previous report for default branch, which is saved as GitHub Action Artifacts
+    actions: read