diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2083e5e..0d78846 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,6 +8,9 @@ on:
 jobs:
   build:
     name: build ${{ matrix.target }}
+    permissions:
+      contents: write
+      actions: read
     strategy:
       fail-fast: false
       matrix: