diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9446ddd..92ed5f8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,9 @@ on:
 
 jobs:
   build:
+    # tauri-action creates the GitHub Release + uploads assets, which needs write.
+    permissions:
+      contents: write
     strategy:
       fail-fast: false
       matrix:
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index 5e0c773..69b98dd 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -77,7 +77,7 @@
   },
   "bundle": {
     "active": true,
-    "targets": ["nsis", "app", "dmg", "deb", "appimage"],
+    "targets": ["nsis", "app", "dmg", "deb"],
     "resources": [],
     "category": "Utility",
     "shortDescription": "Privacy-first client-side tools",