diff --git a/.github/workflows/windows-build.yml b/.github/workflows/windows-build.yml
index 13f2be2..cb509bc 100644
--- a/.github/workflows/windows-build.yml
+++ b/.github/workflows/windows-build.yml
@@ -15,6 +15,9 @@ jobs:
 
   build:
 
+    permissions:
+      contents: write
+
     runs-on: windows-latest
 
     steps:
diff --git a/TODO_CICD.md b/TODO_CICD.md
new file mode 100644
index 0000000..4d24034
--- /dev/null
+++ b/TODO_CICD.md
@@ -0,0 +1,8 @@
+# CI/CD TO DO
+
+- be more modular
+  - https://stackoverflow.com/questions/64055230/nested-templates-calling-a-yaml-file-from-another-yaml-file-in-github-actions
+  - https://gist.github.com/dibosh/d231a1d7228d8fa2095b504f750446e6
+  - https://stackoverflow.com/questions/57115520/can-i-have-multiple-github-actions-workflow-files
+- build multiple platforms
+- additional publish action based on v*-tag