diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
index 82e69d8099..3914c84bfd 100644
--- a/.github/workflows/package.yml
+++ b/.github/workflows/package.yml
@@ -12,6 +12,15 @@ on:
 
 jobs:
   build_mac:
+    permissions:
+      contents: write
+      checks: write
+      actions: read
+      issues: read
+      packages: write
+      pull-requests: read
+      repository-projects: read
+      statuses: read
     runs-on: [self-hosted, macOS, ARM64]
     environment: app-packaging
     steps: