diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index eeb862c..e525b50 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,9 +16,9 @@ jobs:
   release:
     needs: test
     permissions:
-      # Required to push to GHCR
-      contents: read
       # Required to create GH releases
+      contents: write
+      # Required to push to GHCR
       packages: write
       # Required by cosign keyless signing
       id-token: write