diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml
index 0a9bb540b4..d8b548763f 100644
--- a/.github/workflows/pypi-release.yml
+++ b/.github/workflows/pypi-release.yml
@@ -50,6 +50,9 @@ jobs:
 
 
   create-gh-release:
+    permissions:
+      contents: write # to create GitHub release (softprops/action-gh-release)
+
     name: Create GH release
     needs:
       - build-pypi-distribs