diff --git a/.github/workflows/build-tag.yaml b/.github/workflows/build-tag.yaml
index 9d4f5bf..18d2d40 100644
--- a/.github/workflows/build-tag.yaml
+++ b/.github/workflows/build-tag.yaml
@@ -1,5 +1,9 @@
 name: "Build bemanitools and publish release"
 
+permissions:
+  contents: write
+  packages: write
+
 on:
   push:
     tags: