diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b3347a4b..0f1143c3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ on:
   pull_request:
 
 permissions:
-  contents: read
+  contents: write
   pages: write
   id-token: write
 
diff --git a/package.json b/package.json
index 45499143..8a39b855 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
     "coverage": "c8 -r text -r lcov -o .coverage --exclude '**/test/' pnpm test",
     "clean": "rm -rf .coverage && pnpm -F @slangroom/* exec -- rm -rf build",
     "build": "pnpm -F @slangroom/* exec tsc --outdir build/esm --module node16",
-    "publish:ci": "lerna version --no-changelog --conventional-commits --yes && pnpm publish -r --no-git-checks",
+    "publish:ci": "lerna version --no-changelog --conventional-commits --yes && pnpm publish -r --no-git-checks --filter './pkg/*'",
     "docs:api": "node docs/statements/index.mjs",
     "docs:ci": "node docs/statements/index.mjs ci",
     "docs:dev": "vitepress dev docs",