diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 98f8090..8f75128 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: write
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -46,7 +49,7 @@ jobs:
           git config user.email "${{ secrets.GH_DEPLOY_EMAIL }}"
       - name: Set up git for pushing
         run: |
-          git remote set-url origin https://${{ secrets.GH_DEPLOY_USER }}:${{ secrets.GH_TOKEN }}@github.com/${{ github.repository }}.git
+          git remote set-url origin https://x-access-token:${{ secrets.GH_TOKEN }}@github.com/${{ github.repository }}.git
       - name: Show git user and remote
         run: |
           git config --get user.name
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 85b425d..9b67232 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -58,7 +58,7 @@ jobs:
           pip install build bumpver
       - name: Set up git for pushing
         run: |
-          git remote set-url origin https://${{ secrets.GH_DEPLOY_USER }}:${{ secrets.GH_TOKEN }}@github.com/${{ github.repository }}.git
+          git remote set-url origin https://x-access-token:${{ secrets.GH_TOKEN }}@github.com/${{ github.repository }}.git
       - name: Set git user for deploy
         run: |
           git config user.name "${{ secrets.GH_DEPLOY_USER }}"