diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index aa228082..53b33b66 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -5,6 +5,11 @@ env:
   CI_BUILD_NUM: ${{ github.run_id }}
   CI_BRANCH: ${{ github.ref_name }}
 
+permissions:
+  contents: write  # semantic-release-dry verifies the write permissions
+  issues: read # needed by semantic-release
+  pull-requests: write # needed by semantic-release
+
 jobs:
   test:
     name: Test
diff --git a/.releaserc.cjs b/.releaserc.cjs
index 9c3c2125..e6ebfa25 100644
--- a/.releaserc.cjs
+++ b/.releaserc.cjs
@@ -14,7 +14,7 @@ module.exports = {
     }],
     ['@semantic-release/exec', {
       prepareCmd: 'npm run deploy:ci && npm run test:postdeploy',
-      publishCmd: 'npm run deploy:stage',
+      publishCmd: 'npm run deploy:prod',
       successCmd: 'echo "${nextRelease.version}" > released.txt',
     }],
     '@semantic-release/github',