diff --git a/.github/workflows/publish-clm.yaml b/.github/workflows/publish-clm.yaml
index e7ffc0f..a445709 100644
--- a/.github/workflows/publish-clm.yaml
+++ b/.github/workflows/publish-clm.yaml
@@ -4,6 +4,9 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: write
+
 defaults:
   run:
     shell: bash
diff --git a/.github/workflows/publish-scaffold.yaml b/.github/workflows/publish-scaffold.yaml
index c343064..bbcb274 100644
--- a/.github/workflows/publish-scaffold.yaml
+++ b/.github/workflows/publish-scaffold.yaml
@@ -4,6 +4,9 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: write
+
 defaults:
   run:
     shell: bash