diff --git a/.github/workflows/snapshot-on-push-master.yml b/.github/workflows/snapshot-on-push-master.yml
index 38158b384..dc7e6007e 100644
--- a/.github/workflows/snapshot-on-push-master.yml
+++ b/.github/workflows/snapshot-on-push-master.yml
@@ -7,6 +7,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+# suggested at https://jonathansoma.com/everything/git/github-actions-403-error/
+permissions:
+  contents: write
+
 jobs:
   build_windows:
     name: Build (Windows)