diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cf37c93..898007b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ on:
     branches: [main]
 
 permissions:
-  contents: write # tag ref + gh release create + the bump push
+  contents: write # the tag ref, the release publish, the bump push
   # Two consumers (a declared permissions: block zeroes every unspecified
   # scope): the decide step's label read (commits/<sha>/pulls) and the bump
   # fallback's `gh pr create --label`.