diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 65fa2ce700..6667579d8c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,6 +18,8 @@ on:
 jobs:
     publish:
         runs-on: ubuntu-latest
+        permissions:
+            contents: write
         steps:
             # checkout the repo
             - uses: actions/checkout@v3