diff --git a/.github/workflows/build-binaries.yml b/.github/workflows/build-binaries.yml
index 83dd6a3485..179f3fc767 100644
--- a/.github/workflows/build-binaries.yml
+++ b/.github/workflows/build-binaries.yml
@@ -30,6 +30,7 @@ env:
 jobs:
   build_linux:
     runs-on: ubuntu-20.04
+    permissions: write-all
     strategy:
       fail-fast: false
       matrix:
@@ -82,6 +83,7 @@ jobs:
 
   build_windows:
     runs-on: windows-2022
+    permissions: write-all
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
@@ -120,6 +122,7 @@ jobs:
   # macos-14 is disabled for now as we hit our free tier limit for macos builds
   build_macos_x64:
     runs-on: macos-13
+    permissions: write-all
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       MAC_CERTIFICATE: ${{ secrets.MAC_CERTIFICATE }}