diff --git a/.github/workflows/virusScanAllAddons.yml b/.github/workflows/virusScanAllAddons.yml
index 2e98cf8347..0641ed31f4 100644
--- a/.github/workflows/virusScanAllAddons.yml
+++ b/.github/workflows/virusScanAllAddons.yml
@@ -10,7 +10,7 @@ jobs:
         matrix:
           python-version: [ 3.11 ]
       permissions:
-        contents: read
+        contents: write
       env:
         VT_API_KEY: ${{ secrets.VT_API_KEY }}
       steps:
diff --git a/.github/workflows/virusTotalAnalysis.js b/.github/workflows/virusTotalAnalysis.js
index 65d960f273..889a42917e 100644
--- a/.github/workflows/virusTotalAnalysis.js
+++ b/.github/workflows/virusTotalAnalysis.js
@@ -4,7 +4,7 @@ module.exports = ({core}, globPattern) => {
   const fs = require('fs');
   const { exec } = require('child_process');
   var files = glob.globSync(globPattern);
-  const apiUsageCount = 0;
+  var apiUsageCount = 0;
   files.forEach(file => {
     const addonMetadataContents = fs.readFileSync(file);
     const addonMetadata = JSON.parse(addonMetadataContents);
diff --git a/.github/workflows/virusTotalSubmit.js b/.github/workflows/virusTotalSubmit.js
index 255c0023bb..a5e3c13d63 100644
--- a/.github/workflows/virusTotalSubmit.js
+++ b/.github/workflows/virusTotalSubmit.js
@@ -3,8 +3,8 @@ const glob = require('glob');
 module.exports = ({core}, globPattern) => {
   const fs = require('fs');
   const { exec } = require('child_process');
-  var files = glob.globSync(globPattern);
-  const apiUsageCount = 0;
+  const files = glob.globSync(globPattern);
+  var apiUsageCount = 0;
   files.forEach(file => {
     const addonMetadataContents = fs.readFileSync(file);
     const addonMetadata = JSON.parse(addonMetadataContents);