diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 90db2c7d038..2d51a88723a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,7 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions: write-all
     outputs:
       version: ${{ steps.create-github-release.outputs.version }}
     steps:
@@ -55,6 +56,7 @@ jobs:
           echo "version=$VERSION" >> ${GITHUB_OUTPUT}
 
   create-docs-pull-request:
+    permissions: write-all
     needs:
       - release
     uses: ./.github/workflows/reusable-create-docs-pull-request.yml
@@ -64,6 +66,7 @@ jobs:
       AARON_MAXWELL_TOKEN: ${{ secrets.AARON_MAXWELL_TOKEN }}
 
   create-version-bump-pull-request:
+    permissions: write-all
     needs:
       - release
     uses: ./.github/workflows/reusable-create-version-bump-pull-request.yml