diff --git a/.github/workflows/release_nightly.yml b/.github/workflows/release_nightly.yml
index 8c02b96e5417..d8a1a15b9cb5 100644
--- a/.github/workflows/release_nightly.yml
+++ b/.github/workflows/release_nightly.yml
@@ -310,8 +310,14 @@ jobs:
     if: needs.create-nightly-release.outputs.is_active == 'true'
     runs-on: ubuntu-22.04
     permissions:
+      actions: read
+      attestations: write
+      checks: read
       contents: read
       id-token: write
+      metadata: read
+      pull-requests: read
+      statuses: write
     strategy:
       matrix:
         demo: [false, true]