diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 16aa4ef..f2eba4d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,8 +1,4 @@
 name: main
-permissions:
-  contents: write
-  pages: write
-  id-token: write
 on:
   push:
     branches:
@@ -12,6 +8,10 @@ on:
 jobs:
   main:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # to create a release
+      pages: write
+      id-token: write
     steps:
       - name: checkout repo
         uses: actions/checkout@v3
@@ -23,7 +23,10 @@ jobs:
         run: nix flake check
 
       - name: build package
-        run: nix build
+        run: |
+          nix build
+          # https://github.com/actions/deploy-pages/issues/58
+          cp -rL --no-preserve=mode,ownership ./result www
 
       - name: get latest tag
         id: latest
@@ -46,7 +49,7 @@ jobs:
         if: steps.release.outcome == 'success'
         uses: actions/upload-pages-artifact@v1
         with:
-          path: ./result
+          path: ./www
 
       - name: deploy
         if: steps.release.outcome == 'success'