diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ac8e55756..76d145b8e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -86,6 +86,9 @@ jobs:
     # Only run on push to main/master, not on PRs
     if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master')
 
+    permissions:
+      contents: write
+
     steps:
     - uses: actions/checkout@v4
       with: