diff --git a/.github/workflows/on-main-branch-change.yaml b/.github/workflows/on-main-branch-change.yaml
index b6e1207..c24feb0 100644
--- a/.github/workflows/on-main-branch-change.yaml
+++ b/.github/workflows/on-main-branch-change.yaml
@@ -9,6 +9,8 @@ on:
 jobs:
   build_draft_pdf:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # Note: Needed in order to generate a tag on the associated commit.
     steps:
       - name: Set up Git repository
         uses: actions/checkout@v4
@@ -33,7 +35,6 @@ jobs:
       - name: Create prerelease
         uses: ncipollo/release-action@v1
         with:
-          token: "${{ secrets.GITHUB_TOKEN }}"
           allowUpdates: true
           name: Prerelease
           prerelease: true
diff --git a/.github/workflows/on-release-branch-change.yml b/.github/workflows/on-release-branch-change.yml
index 59c8b1f..bcdef72 100644
--- a/.github/workflows/on-release-branch-change.yml
+++ b/.github/workflows/on-release-branch-change.yml
@@ -9,6 +9,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # Note: Needed in order to generate a tag on the associated commit.
     steps:
       - name: Set up Git repository
         uses: actions/checkout@v4
diff --git a/.github/workflows/on-release-created.yml b/.github/workflows/on-release-created.yml
index 44b2fa7..6195373 100644
--- a/.github/workflows/on-release-created.yml
+++ b/.github/workflows/on-release-created.yml
@@ -9,6 +9,8 @@ on:
 jobs:
   create_branch:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # Note: Needed in order to generate a tag on the associated commit.
     steps:
       - uses: peterjgrainger/action-create-branch@v2.0.1
         env: