diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fb467ab..9f63eba 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -72,6 +72,9 @@ jobs:
 
       - name: Publish the release notes
         uses: release-drafter/release-drafter@v5.20.0
+        permissions:
+          contents: read
+          pull-requests: read
         with:
           publish: ${{ steps.check-version.outputs.tag != '' }}
           tag: ${{ steps.check-version.outputs.tag }}