diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 63432c70..8158c15f 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -52,6 +52,9 @@ jobs:
     name: Create release
     if: "!contains(github.event.head_commit.message, '[no release]')"
     runs-on: self-hosted
+    permissions:
+      # needed to create a release
+      contents: write 
     needs: new-version
     steps:
       - uses: actions/checkout@v3