diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 5c1fc59..f331dbd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -6,7 +6,7 @@ on:
     - 'v*.*.*'
 
 permissions:
-  contents: write
+  contents: read
   packages: write
 
 jobs:
@@ -28,6 +28,12 @@ jobs:
       with:
         go-version: '1.20'  # This needs to be a string!
 
+    - name: Token check
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      run: |-
+        curl -v -H "Accept: application/vnd.github+json" -H "Authorization: token $GITHUB_TOKEN" 'https://api.github.com/orgs/BuoyantIO/packages?package_type=container'
+
     - name: Run goreleaser release
       uses: goreleaser/goreleaser-action@v5
       with: