diff --git a/.github/workflows/publish-to-other-than-github.yaml b/.github/workflows/publish-to-other-than-github.yaml
index f4e314c50..c6fbd0f7a 100644
--- a/.github/workflows/publish-to-other-than-github.yaml
+++ b/.github/workflows/publish-to-other-than-github.yaml
@@ -125,6 +125,7 @@ jobs:
     name: Update Winget
     if: github.event.client_payload.push-to-winget && github.event.client_payload.version != ''
     runs-on: windows-latest
+    permissions: write-all
     steps:
     - name: Ensure proper version
       run: |
@@ -150,6 +151,7 @@ jobs:
           https://github.com/open-component-model/ocm/releases/download/v${{ env.RELEASE_VERSION }}/ocm-${{ env.RELEASE_VERSION }}-windows-arm64.zip `
           --version ${{ env.RELEASE_VERSION }} `
           Open-Component-Model.ocm-cli
+
   push-to-website:
     name: Update OCM Website
     runs-on: ubuntu-latest
@@ -163,4 +165,4 @@ jobs:
         token: ${{ steps.generate_token.outputs.token }}
         repository: open-component-model/ocm-website
         event-type: ocm-cli-release
-        client-payload: '{"tag": "${{ env.RELEASE_VERSION }}"}'
\ No newline at end of file
+        client-payload: '{"tag": "${{ env.RELEASE_VERSION }}"}'