diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ad29e2a..b3b051d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -110,3 +110,5 @@ jobs:
     with:
       version: ${{ needs.trigger-release.outputs.version }}
     secrets: inherit
+    permissions:
+      contents: write