diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3358143e7..744575781 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,6 +6,9 @@ on:
       - 'release/v**'
   workflow_dispatch: # For manually running release process to verify codesigning of artifacts
 
+permissions:
+  contents: write
+
 jobs:
   release-macos:
     name: Publish macOS (electron-builder)
@@ -30,7 +33,6 @@ jobs:
           APPLEID_TEAM_ID: ${{ secrets.appleid_teamid }}
           CSC_LINK: ${{ secrets.mac_certs }}
           CSC_KEY_PASSWORD: ${{ secrets.mac_certs_password }}
-          GH_TOKEN: ${{ secrets.gh_token }}
           NOTARIZE: true
       - uses: actions/upload-artifact@v4
         with:
@@ -55,8 +57,6 @@ jobs:
           OAUTH_CLIENT_ID: ${{ secrets.oauth_client_id }}
           OAUTH_CLIENT_SECRET: ${{ secrets.oauth_client_secret }}
       - run: pnpm make:win --publish onTagOrDraft
-        env:
-          GH_TOKEN: ${{ secrets.gh_token }}
       - uses: actions/upload-artifact@v4
         with:
           name: Gitify-release-win
@@ -80,8 +80,6 @@ jobs:
           OAUTH_CLIENT_ID: ${{ secrets.oauth_client_id }}
           OAUTH_CLIENT_SECRET: ${{ secrets.oauth_client_secret }}
       - run: pnpm make:linux --publish onTagOrDraft
-        env:
-          GH_TOKEN: ${{ secrets.gh_token }}
       - uses: actions/upload-artifact@v4
         with:
           name: Gitify-release-linux