diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c3a759e..6f9e7c8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,6 +14,8 @@ jobs:
     permissions:
       # id-token for the trusted publisher setup
       id-token: write
+      # for tagging the commit
+      contents: write
     steps:
       - uses: actions/checkout@v2