diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7722cc9992..5b30e700d7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,6 +26,10 @@ jobs:
       issues: write       # Updated to write for release-drafter
       pull-requests: write    # Updated to write for release-drafter      
       attestations: write # Required to create and persist attestations
+      security-events: write  # Needed for SBOM attestation
+      packages: write     # Needed for publishing packages
+      statuses: write    # Required for commit statuses updated by actions
+      deployments: write
     strategy:
       fail-fast: false