diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 836347361ef6..798c905b1ff5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -4,6 +4,8 @@ on:
     tags: [ 'v*.*.*' ]
 permissions:
   id-token: write
+  pull-requests: write
+  contents: write
 jobs:
   release:
     if: github.repository == 'aws/karpenter'