diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fccb398ec..634429bcb 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,7 +14,7 @@ env:
   BRANCH_NAME: master
 
 permissions:
-  contents: write
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref && github.ref || github.run_id }}
@@ -824,6 +824,9 @@ jobs:
   release:
     if: ${{ github.event_name == 'schedule' || github.event.inputs.create_release == 'true' }}
 
+    permissions:
+      contents: write
+
     runs-on: ubuntu-latest
 
     needs: