diff --git a/.github/workflows/coolify-rc-release.yml b/.github/workflows/coolify-rc-release.yml
index 90005a97d..d7f4dc830 100644
--- a/.github/workflows/coolify-rc-release.yml
+++ b/.github/workflows/coolify-rc-release.yml
@@ -165,7 +165,7 @@ jobs:
     needs: [validate, build]
     runs-on: ubuntu-24.04
     permissions:
-      contents: read
+      contents: write
     steps:
       - name: Revalidate draft prerelease
         uses: actions/github-script@v8
diff --git a/tests/Unit/ProductionImageWorkflowTest.php b/tests/Unit/ProductionImageWorkflowTest.php
index 5fcada309..659d23312 100644
--- a/tests/Unit/ProductionImageWorkflowTest.php
+++ b/tests/Unit/ProductionImageWorkflowTest.php
@@ -141,6 +141,7 @@
         ->toContain('!release.prerelease')
         ->toContain('release.body?.trim()')
         ->toContain('revalidate:')
+        ->toMatch('/revalidate:.*?permissions:\s+contents: write/s')
         ->toContain('needs: [validate, build, revalidate]')
         ->toContain('COOLIFY_VERSION=${{ needs.validate.outputs.version }}')
         ->toContain('--tag "${IMAGE}:${VERSION}"')