From f9ba932c6113a1c2243b7dd295a9f2c8ed133489 Mon Sep 17 00:00:00 2001
From: Roger Zhang <ruojiazh@amazon.com>
Date: Wed, 31 Dec 2025 15:06:27 -0800
Subject: [PATCH] set permission

---
 .github/workflows/check-binaries.yml | 2 ++
 .github/workflows/release.yml        | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/.github/workflows/check-binaries.yml b/.github/workflows/check-binaries.yml
index 75fa28f..da8ecf6 100644
--- a/.github/workflows/check-binaries.yml
+++ b/.github/workflows/check-binaries.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   check-for-vulnerabilities:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     outputs:
       report_contents: ${{ steps.save-output.outputs.report_contents }}
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 32e878d..e8805c7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,6 +15,9 @@ jobs:
   Release:
     environment: Release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
     steps:
       - uses: actions/checkout@v4
         with: