diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 39a0d63ac..f92d44fd0 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -88,6 +88,10 @@ jobs:
   build_and_release_storagext_cli:
     runs-on: self-hosted
 
+    permissions:
+      contents: write
+      packages: write
+
     if: github.ref_type == 'tag' && startsWith(github.ref_name, 'storagext-cli-v')
 
     steps:
@@ -144,6 +148,10 @@ jobs:
   build_and_release_polka_storage_node:
     runs-on: self-hosted
 
+    permissions:
+      contents: write
+      packages: write
+
     if: github.ref_type == 'tag' && startsWith(github.ref_name, 'polka-storage-node-v')
 
     steps:
@@ -200,6 +208,10 @@ jobs:
   build_and_release_polka_storage_provider_server:
     runs-on: self-hosted
 
+    permissions:
+      contents: write
+      packages: write
+
     if: github.ref_type == 'tag' && startsWith(github.ref_name, 'polka-storage-provider-server-v')
 
     steps:
@@ -256,6 +268,10 @@ jobs:
   build_and_release_polka_storage_provider_client:
     runs-on: self-hosted
 
+    permissions:
+      contents: write
+      packages: write
+
     if: github.ref_type == 'tag' && startsWith(github.ref_name, 'polka-storage-provider-client-v')
 
     steps: