diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index fd715ce..5f18204 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -74,6 +74,8 @@ jobs:
           GH_TOKEN: ${{ github.token }}
   build-cosmopolitan:
     runs-on: macos-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
       - run: |