diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index ed78b67eb..c403cf65b 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -83,6 +83,7 @@ jobs:
   tag:
     name: Conda Tag
     runs-on: ubuntu-latest
+    permissions: {}
     needs: [ version_check ]
     if: ${{ startsWith(github.ref_name, 'v') || needs.version_check.outputs.PCAPKIT_TAG_EXISTS == 'false' }}
     steps: