diff --git a/.github/workflows/create-prerelase.yml b/.github/workflows/create-prerelase.yml
index ce37d26c..c5a43fbc 100644
--- a/.github/workflows/create-prerelase.yml
+++ b/.github/workflows/create-prerelase.yml
@@ -16,6 +16,9 @@ jobs:
     name: Create prerelease
     if: "!contains(github.event.head_commit.message, '[no release]')"
     runs-on: windows-2019
+    permissions:
+      # needed to create a release
+      contents: write
     steps:
       - uses: actions/checkout@v3
         with:
diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 63432c70..ce330a8d 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -17,6 +17,9 @@ jobs:
     name: Bump version
     if: "!contains(github.event.head_commit.message, '[no release]')"
     runs-on: windows-2019
+    permissions:
+      # needed to create a release
+      contents: write 
     outputs:
       previous_tag: ${{ steps.bump.outputs.previous_tag }}
       new_tag: ${{ steps.bump.outputs.new_tag }}
@@ -52,6 +55,9 @@ jobs:
     name: Create release
     if: "!contains(github.event.head_commit.message, '[no release]')"
     runs-on: self-hosted
+    permissions:
+      # needed to create a release
+      contents: write 
     needs: new-version
     steps:
       - uses: actions/checkout@v3