diff --git a/.github/workflows/build_wheel.yml b/.github/workflows/build_wheel.yml
index e4834ff44d..faf0ccd8af 100644
--- a/.github/workflows/build_wheel.yml
+++ b/.github/workflows/build_wheel.yml
@@ -1,4 +1,5 @@
 name: cibuildwheel
+permissions: write-all
 
 on:
   push:
@@ -104,5 +105,5 @@ jobs:
       - name: Release
         uses: fnkr/github-action-ghr@v1
         env:
-          GHR_PATH: ${{steps.fetch_artifacts.outputs.download-path}}/artifact
+          GHR_PATH: ${{steps.fetch_artifacts.outputs.download-path}}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/build_wheel_all_archs.yml b/.github/workflows/build_wheel_all_archs.yml
index 6f88c4c822..faf0ad881e 100644
--- a/.github/workflows/build_wheel_all_archs.yml
+++ b/.github/workflows/build_wheel_all_archs.yml
@@ -1,4 +1,5 @@
 name: maturin wheels
+permissions: write-all
 
 on:
   pull_request:        # use for testing modifications to this action
@@ -9,9 +10,6 @@ on:
   schedule:
     - cron: "0 0 * * *" # daily
 
-permissions:
-  contents: read
-
 jobs:
 
   linux:
@@ -85,5 +83,5 @@ jobs:
       - name: Release
         uses: fnkr/github-action-ghr@v1
         env:
-          GHR_PATH: ${{steps.fetch_artifacts.outputs.download-path}}/artifact
+          GHR_PATH: ${{steps.fetch_artifacts.outputs.download-path}}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}