diff --git a/.github/workflows/site-deploy.yml b/.github/workflows/site-deploy.yml
index d7c99f3944..804c434f70 100644
--- a/.github/workflows/site-deploy.yml
+++ b/.github/workflows/site-deploy.yml
@@ -17,6 +17,8 @@ jobs:
   deploy-site-page:
     if: github.ref == 'refs/heads/master'
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
         with:
@@ -60,6 +62,8 @@ jobs:
     needs: deploy-site-page
     if: github.ref == 'refs/heads/master'
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
         with:
@@ -103,6 +107,8 @@ jobs:
   deploy-versioned-docs-page:
     if: (github.ref != 'refs/heads/master' && (startsWith(github.ref, 'refs/heads/') || startsWith(github.ref, 'refs/tags/')))
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     continue-on-error: true
     steps:
       - uses: actions/checkout@v3
@@ -156,4 +162,4 @@ jobs:
           if git commit -m "Regenerated Amoro versioned docs page based on ${GITHUB_SHA} commit"
           then
             git push origin asf-site
-          fi
\ No newline at end of file
+          fi