diff --git a/.github/workflows/build-and-validate.yml b/.github/workflows/build-and-validate.yml
index f9258c1c6a..0381146f4a 100644
--- a/.github/workflows/build-and-validate.yml
+++ b/.github/workflows/build-and-validate.yml
@@ -367,6 +367,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: [validate-and-build, run-appinspect, create-report]
     #Only run when tagged
+    # adding perms needed
+    permissions:
+      contents: write
     if: startsWith(github.ref, 'refs/tags/')
     steps: