diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6a25f68..7e8dadd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,8 +6,6 @@ on:
 
 permissions:
   id-token: write
-  contents: write
-  issues: write
 
 jobs:
   release:
@@ -17,6 +15,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
@@ -30,5 +30,5 @@ jobs:
         run: make build
       - name: Release
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.CI_TOKEN }}
         run: npm run semantic-release