diff --git a/.github/workflows/lambda-release-tag-runners.yml b/.github/workflows/lambda-release-tag-runners.yml
index ddc921dedc..8722e590e2 100644
--- a/.github/workflows/lambda-release-tag-runners.yml
+++ b/.github/workflows/lambda-release-tag-runners.yml
@@ -28,6 +28,8 @@ jobs:
           tag: v${{ steps.date.outputs.date }}
 
   call-release:
+    permissions:
+      contents: write
     needs: tag
     uses: ./.github/workflows/lambda-do-release-runners.yml
     with: