diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ed43070..2e789f1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -33,6 +33,8 @@ jobs:
   # Only run this for non-PR jobs.
   publish_build:
     runs-on: ubuntu-latest
+    permissions:
+        contents: write
     name: Upload to release
     if: startsWith(github.ref, 'refs/tags')
     needs: build