diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1820a6d5..34af796e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,6 +4,11 @@ on:
     types: [ released ]
 jobs:
   release:
+    permissions:
+      contents: read
+      issues: read
+      pull-requests: read
+      packages: write
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner