diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 91e06996..2902e507 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -66,7 +66,7 @@ jobs:
     if: always() && needs.check-changesets.outputs.has-changesets == 'true'
     environment: "Release" # This will require an approval from a maintainer, they are notified in Slack above
     permissions:
-      contents: write
+      contents: read
     outputs:
       commit-hash: ${{ steps.commit-release.outputs.commit-hash }}
       new_version: ${{ steps.sampo-release.outputs.new_version }}