diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 00198415dacb..78aabaea14db 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,6 +22,8 @@ permissions: {} # none
 jobs:
   # This workflow contains a single job called "build"
   build:
+    permissions:
+      contents: write  # for softprops/action-gh-release to create GitHub release
     # The type of runner that the job will run on
     runs-on: ubuntu-latest