diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ebe7fe2..d130ff1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,6 +12,9 @@ on:
         required: true
         default: 'false'
 
+permissions:
+  contents: write
+
 env:
   version: m126-6fd3120c1b
 
diff --git a/script/common.py b/script/common.py
index 738f3c6..c498a70 100644
--- a/script/common.py
+++ b/script/common.py
@@ -58,7 +58,7 @@ def github_headers():
   if os.environ.get('GITHUB_BASIC'):
     auth = 'Basic ' + base64.b64encode(os.environ.get('GITHUB_BASIC').encode('utf-8')).decode('utf-8')
   else:
-    auth = 'token ' + os.environ.get('GITHUB_TOKEN')
+    auth = 'Bearer ' + os.environ.get('GITHUB_TOKEN')
   return {
     'Accept': 'application/vnd.github.v3+json',
     'Authorization': auth