diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 4d375278..ba2438a5 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -5,6 +5,9 @@ on:
 name: release-please
 jobs:
   release-please:
+    permissions:
+      contents: write
+      pull-requests: write
     runs-on: ubuntu-latest
     outputs:
       releases_created: ${{ steps.release-please.outputs.releases_created }}
@@ -25,10 +28,12 @@ jobs:
     container: 
       image: fedora:38
       options: --privileged
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
       - name: Generate ISO  
-        uses: ublue-os/isogenerator@main
+        uses: ublue-os/isogenerator@v1.0.5
         id: isogenerator
         with:
           image-name: universalblue
@@ -42,11 +47,19 @@ jobs:
       - name: Upload ISO
         env:
           GITHUB_TOKEN: ${{ github.token }}
-        run:
-          gh release upload ${{ needs.release-please.outputs.tag }} ${{ steps.isogenerator.outputs.iso-path }} -R ublue-os/main --clobber
+        run: |
+          gh release upload \
+            ${{ needs.release-please.outputs.tag }} \
+            ./${{ steps.isogenerator.outputs.iso-path }} \
+            --repo ${{ github.repository_owner }}/${{ github.event.repository.name }} \
+            --clobber
+
       - name: Upload SHA256SUM
         env:
           GITHUB_TOKEN: ${{ github.token }}
-        run:
-          gh release upload ${{ needs.release-please.outputs.tag }} ${{ steps.isogenerator.outputs.sha256sum-path }} -R ublue-os/main --clobber
-
+        run: |
+          gh release upload \
+            ${{ needs.release-please.outputs.tag }} \
+            ./${{ steps.isogenerator.outputs.sha256sum-path }} \
+            --repo ${{ github.repository_owner }}/${{ github.event.repository.name }} \
+            --clobber