diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7b9dc915..aa9e975a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,7 +3,7 @@ on:
   push:
   pull_request:
 
-
+permissions: read-all
 jobs:
   tests:
     strategy:
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
new file mode 100644
index 00000000..2cb978e7
--- /dev/null
+++ b/.github/workflows/release-please.yml
@@ -0,0 +1,19 @@
+on:
+    push:
+      branches:
+        - main
+  
+  permissions:
+    contents: write
+    pull-requests: write
+  
+  name: release-please
+  
+  jobs:
+    release-please:
+      runs-on: ubuntu-latest
+      steps:
+        - uses: google-github-actions/release-please-action@v3
+          with:
+            release-type: node
+            package-name: release-please-action
\ No newline at end of file