diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 10a3c05b7..ee6215366 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,7 +3,7 @@ name: CI
 on: ['push', 'pull_request']
 
 permissions:
-  contents: read # to fetch code (actions/checkout)
+  contents: write # to upload assets to releases
 
 jobs:
   ci:
@@ -52,3 +52,4 @@ jobs:
       run: bash scripts/deploy.sh
       env:
         DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}