diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f1dc4c2e4a..38dbf07a47 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -16,6 +16,7 @@ jobs:
     if: github.repository == 'commaai/openpilot'
     permissions:
       checks: read
+      contents: write
     steps:
     - name: Install wait-on-check-action dependencies
       run: |