diff --git a/.github/workflows/deploy-branch.yml b/.github/workflows/deploy-branch.yml
index a499154ac8..1890666f3d 100644
--- a/.github/workflows/deploy-branch.yml
+++ b/.github/workflows/deploy-branch.yml
@@ -37,6 +37,9 @@ jobs:
       TARANTOOL_UPDATE_KEY: ${{secrets.TARANTOOL_UPDATE_KEY}}
       TARANTOOL_UPDATE_URL: ${{secrets.TARANTOOL_DEVELOP_UPDATE_URL}}
       VKTEAMS_BOT_TOKEN: ${{secrets.VKTEAMS_TARANTOOLBOT_TOKEN}}
+    permissions:
+      deployments: write
+      contents: read
     steps:
       - name: Prevent dubious ownership
         id: add-safe-directory