diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 491adba..970daa5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,7 +1,5 @@
 name: Create Release, update README, send announceybot
 
-# we need write permission on contents for the release action
-permissions: read-all|write-all
 
 on:
   push:
@@ -48,6 +46,9 @@ jobs:
     - name: Create Release
       id: create_release
       uses: actions/create-release@v1
+      permissions: 
+        id-token: read|write
+        contents: read|write
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions
       with: