diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index f79bac18e..c0ce8b8bd 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -14,6 +14,7 @@ permissions:
 
 jobs:
   build-zip:
+    permissions: write-all
     # run on pushes to any branch
     # run on PRs from external forks
     if: |