diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e2fb124..fe4c52f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -333,6 +333,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
 
+    permissions:
+      contents: write
+
     # run on 'main' and 'release' branch when:
     #   – build succeeded, AND
     #   – publish-coverage succeeded OR was skipped