diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 913a5c5a850..14aa850ff5c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -268,6 +268,9 @@ jobs:
     if: ${{ github.ref == 'refs/heads/master' }}
     needs: [rustfmt, test, bench, dist]
 
+    permissions:
+      contents: write # for creating the dev tag and release
+
     concurrency:
       group: release-dev
       cancel-in-progress: true