diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
index d827cee5..f07e0604 100644
--- a/.github/workflows/build-release.yml
+++ b/.github/workflows/build-release.yml
@@ -16,6 +16,9 @@ jobs:
   run-tests:
     if: needs.prechecks.outputs.need-new-tag == 'true'
     uses: bdunderscore/ndmf/.github/workflows/gameci.yml@main
+    permissions:
+      checks: write
+      contents: read
   prechecks:
     runs-on: ubuntu-latest
     needs: run-tests