diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d41fa48..335174a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,6 +17,9 @@ jobs:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
 
+      # should allow pushing code
+      contents: write
+
     steps:
       - name: Only allow releases off of main
         run: |