diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index cb62e88..0831c8c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -268,6 +268,8 @@ jobs:
       ARCH_SUFFIX: "${{ (matrix.linux_cross_arch != '' && '-') || '' }}${{ (matrix.linux_cross_arch != '' && matrix.linux_cross_arch) || '' }}"
 
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: write
     environment: ${{ inputs.target == 'voicevox_onnxruntime' && 'production' || '' }}
 
     steps:
@@ -694,6 +696,8 @@ jobs:
   build-xcframework:
     needs: build-onnxruntime
     runs-on: macos-14
+    permissions:
+      contents: write
     outputs:
       release-name: ${{ steps.gen-envs.outputs.release-name }}
     steps:
@@ -826,6 +830,8 @@ jobs:
   build-spec-table:
     needs: [build-onnxruntime, build-xcframework, get-terms]
     runs-on: ubuntu-22.04
+    permissions:
+      contents: write
     steps:
       - name: Download specifications
         uses: actions/download-artifact@v4