diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ff848846a15488a91791478465b336cc4f9b272a..bf822b482627b70d0aec809c7512cafa363b867f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -166,6 +166,9 @@ jobs:
         runs-on: ubuntu-latest
         needs: build
         if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/dev'
+        permissions:
+            packages: write
+            contents: read
         steps:
             - name: Download artifacts
               uses: actions/download-artifact@v4