diff --git a/.env.example b/.env.example
index 6736f48..f85f7c3 100644
--- a/.env.example
+++ b/.env.example
@@ -1,6 +1,5 @@
 CLOUDFLARE_ACCOUNT_ID=''
 CLOUDFLARE_API_TOKEN=''
-PAT=''
 WORKER_D1=''
 WORKER_DOMAIN=''
 ALLOWED_ORIGIN=''
diff --git a/.github/workflows/cd_deploy.yml b/.github/workflows/cd_deploy.yml
index 31da909..a200856 100644
--- a/.github/workflows/cd_deploy.yml
+++ b/.github/workflows/cd_deploy.yml
@@ -6,6 +6,12 @@ on:
       - 'main'
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+  issues: write
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
@@ -66,7 +72,7 @@ jobs:
       - name: Deploy — Website
         uses: peaceiris/actions-gh-pages@v4
         with:
-          github_token: ${{ secrets.PAT }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./build
           publish_branch: 'website'
           cname: jsconf.com.br