diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 848c903..9215f17 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -30,6 +30,8 @@ jobs:
   update-charts:
     if: github.ref == 'refs/heads/main'
     needs: build
+    permissions:
+      contents: write
     uses: ./.github/workflows/cd-update-charts.yaml
 
   # Build sdist (main branch or tag)