diff --git a/.github/workflows/production-release.yml b/.github/workflows/production-release.yml
index 861c590a33..6aae683a64 100644
--- a/.github/workflows/production-release.yml
+++ b/.github/workflows/production-release.yml
@@ -24,7 +24,12 @@ defaults:
     shell: bash
 
 permissions:
-  contents: read
+  contents: write
+  packages: write
+  id-token: write
+  security-events: write
+  issues: write
+  actions: write
 
 jobs:
   create-tag-and-release:
@@ -94,10 +99,3 @@ jobs:
       operator_version: ${{ github.event.inputs.operator-version }}
       dry_run: ${{ github.event.inputs.dry_run }}
     secrets: inherit
-    permissions:
-      contents: write
-      packages: write
-      id-token: write
-      security-events: write
-      issues: write
-      actions: write