diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 95393576..42774fd8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,9 +12,11 @@ on:
       - develop
 
 jobs:
-  release:
+  create_release:
     name: Create GitHub Release
     runs-on: ubuntu-latest
+    outputs:
+      upload_url: ${{ steps.create_release.outputs.upload_url }}
     permissions:
       contents: write
     steps:
@@ -26,7 +28,9 @@ jobs:
   manylinux:
     runs-on: ubuntu-latest
     name: Codon CI (manylinux)
-    needs: [ release ]
+    needs: create_release
+    permissions:
+      content: write
     steps:
       - uses: actions/checkout@v4
 
@@ -46,7 +50,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          upload_url: ${{ needs.release.steps.create_release.outputs.upload_url }}
+          upload_url: ${{ needs.create_release.outputs.upload_url }}
           asset_path: ./codon-linux-x86_64.tar.gz
           asset_name: codon-linux-x86_64.tar.gz
           asset_content_type: application/gzip
@@ -65,8 +69,9 @@ jobs:
           - macos-12
     runs-on: ${{ matrix.os }}
     name: Codon CI
-    needs: [ release ]
+    needs: create_release
     permissions:
+      content: write
       id-token: write
     steps:
       - uses: actions/checkout@v4
@@ -159,7 +164,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          upload_url: ${{ needs.release.steps.create_release.outputs.upload_url }}
+          upload_url: ${{ needs.create_release.outputs.upload_url }}
           asset_path: ./codon-darwin-x86_64.tar.gz
           asset_name: codon-darwin-x86_64.tar.gz
           asset_content_type: application/gzip