diff --git a/.github/workflows/release-main.yml b/.github/workflows/release-main.yml
index adf765aa..20c17c16 100644
--- a/.github/workflows/release-main.yml
+++ b/.github/workflows/release-main.yml
@@ -14,10 +14,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     permissions:
+      artifact-metadata: write
+      attestations: write
       contents: write
       id-token: write
       packages: write
-      attestations: write
     steps:
     - uses: actions/checkout@v6
     - name: Bootstrap Action Workspace
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2cd88609..47d87640 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,10 +13,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     permissions:
+      artifact-metadata: write
+      attestations: write
       contents: write
       id-token: write
       issues: write
-      attestations: write
     steps:
     - uses: actions/checkout@v6
     - name: Bootstrap Action Workspace