diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 47c2388..2555840 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -9,6 +9,9 @@ jobs:
   build:
     name: Build and publish
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: francois2metz/steampipe-plugin-build-push-action@v0
         env: