diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c5ac5e3..aac6712 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,10 @@ on:
     tags:
       - '*'
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -20,3 +24,5 @@ jobs:
 
       - name: publish plugin
         run: sbt publish
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}