diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e676e40..cbfa0c6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,8 +7,10 @@ jobs:
     build:
         runs-on: ubuntu-latest
         permissions:
-            contents: write
-            id-token: write
+            contents: write # to be able to publish a GitHub release
+            issues: write # to be able to comment on released issues
+            pull-requests: write # to be able to comment on released pull requests
+            id-token: write # to enable use of OIDC for trusted publishing and npm provenance
         steps:
             - uses: actions/checkout@v4
             - uses: actions/setup-node@v6