diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index d2e22e7..1ec7d87 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -5,6 +5,9 @@ on:
   schedule:
     - cron: "20 2,6,10,14,18,22 * * *"
 
+permissions:
+  contents: write
+
 jobs:
   build-and-publish-universal-rulesets:
     runs-on: ubuntu-latest