diff --git a/.github/workflows/kcpp-build-release-linux.yaml b/.github/workflows/kcpp-build-release-linux.yaml
index 4036aa6f5..e2ebbc90f 100644
--- a/.github/workflows/kcpp-build-release-linux.yaml
+++ b/.github/workflows/kcpp-build-release-linux.yaml
@@ -16,6 +16,7 @@ env:
 jobs:
   linux:
     runs-on: ubuntu-22.04
+    permissions: write-all
     container:
       image: ubuntu:20.04
       options: --privileged
@@ -60,6 +61,18 @@ jobs:
           name: kcpp_linux_binary
           path: dist/
 
+      - name: Install GitHub CLI
+        run: |
+          apt-get update
+          apt-get install -y curl
+          curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+            | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg
+          chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg
+          echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+            | tee /etc/apt/sources.list.d/github-cli.list > /dev/null
+          apt-get update
+          apt-get install -y gh
+
       - name: Upload to GitHub Release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/kcpp-build-release-win.yaml b/.github/workflows/kcpp-build-release-win.yaml
index 733a1181f..b0dd97d02 100644
--- a/.github/workflows/kcpp-build-release-win.yaml
+++ b/.github/workflows/kcpp-build-release-win.yaml
@@ -14,6 +14,7 @@ env:
 jobs:
   windows:
     runs-on: windows-2022
+    permissions: write-all
     steps:
       - name: Clone
         id: checkout