diff --git a/.github/workflows/release-process.yml b/.github/workflows/release-process.yml
index 97f9417ab1fa..c8436ff2f8b5 100644
--- a/.github/workflows/release-process.yml
+++ b/.github/workflows/release-process.yml
@@ -32,6 +32,9 @@ on:
         required: false
         default: 'cut'
 
+permissions:
+  contents: write
+
 jobs:
   release_process:
     if: "github.repository == 'bytecodealliance/wasmtime' || !github.event.schedule"