diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 39d7209..e7e3f07 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -36,6 +36,11 @@ jobs:
     needs: release
     runs-on: ubuntu-latest
     if: needs.release.outputs.published == 'true'
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      id-token: write
     steps:
       - id: authenticate
         uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2