diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 25be5d5fd32a..2f4bb30a6a63 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -19,6 +19,9 @@ jobs:
     uses: ./.github/workflows/partial-frontend.yml
 
   build-release:
+    permissions:
+      contents: read
+      packages: write
     name: Build Tagged Release
     uses: ./.github/workflows/partial-builder.yml
     needs: