diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
index 1ac562b..0b9cf0f 100644
--- a/.github/workflows/pipeline.yml
+++ b/.github/workflows/pipeline.yml
@@ -2,9 +2,6 @@ name: pipeline
 
 on: [push]
 
-permissions:
-  contents: write
-
 jobs:
   prereqs:
     runs-on: ubuntu-latest
@@ -18,6 +15,8 @@ jobs:
   go-release:
     needs:
       - go
+    permissions:
+      contents: write
     uses: pete911/github-actions/.github/workflows/go-releaser.yml@main
     secrets:
       PUBLIC_REPO_TOKEN: ${{ secrets.PUBLIC_REPO_TOKEN }}