diff --git a/.github/workflows/tag-and-release.yaml b/.github/workflows/tag-and-release.yaml
index 71de07c..b5758ee 100644
--- a/.github/workflows/tag-and-release.yaml
+++ b/.github/workflows/tag-and-release.yaml
@@ -5,10 +5,11 @@ on:
     branches:
       - main
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   tag-and-release:
     uses: dsb-norge/github-actions-terraform/.github/workflows/terraform-module-release.yaml@v0
     secrets: inherit
-    permissions:
-        contents: write  # required for checkout action. 
-        pull-requests: write # required for commenting on PR
\ No newline at end of file