diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d28c43f..751dce7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -69,6 +69,9 @@ jobs:
           path: bin
           retention-days: 3
   publish:
+    permissions:
+      contents: write
+      pull-requests: read
     needs: build
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v')