diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 35f6bc38..a4a9f00f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -126,6 +126,8 @@ jobs:
     name: Package ${{ matrix.target }}
     needs: [test]
     if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      contents: write
     strategy:
       fail-fast: false
       matrix:
@@ -148,6 +150,7 @@ jobs:
             name: bbox-server-Darwin-aarch64.tar.gz
     runs-on: ${{ matrix.os }}
     steps:
+      - uses: actions/checkout@v3
       - uses: actions/download-artifact@v3
         with:
           name: build-${{ matrix.target }}
@@ -171,10 +174,8 @@ jobs:
         if: matrix.target == 'x86_64-apple-darwin' || matrix.target == 'aarch64-apple-darwin'
         run: shasum -a 256 ${{ matrix.name }}
       - name: Publish
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           draft: true
-          files: 'bbox-server*'
+          files: ${{ matrix.name }}
           body_path: CHANGELOG.md
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}