diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 35dad6775..628ba4ff6 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -104,6 +104,9 @@ jobs:
       - build-test-linux
       - build-test-windows
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: write
     steps:
       - uses: actions/download-artifact@v3
       - uses: ncipollo/release-action@v1