diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7351c023..469f47b8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,9 +6,6 @@ on:
     tags:
       - "v*.*.*"
 
-
-permissions: write-all
-
 jobs:
   check-versions:
     runs-on: ubuntu-latest
@@ -70,6 +67,8 @@ jobs:
       semver: ${{ needs.check-versions.outputs.semver }}
 
   release:
+    permissions:
+      contents: write
     needs: [check-versions, coordinator-image, client-image, android-build]
     runs-on: ubuntu-latest
     steps: