diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index 3db47c6..4053ac0 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -25,6 +25,8 @@ jobs:
 
   deploy:
     needs: define-environment
+    permissions:
+      id-token: write
     uses: "./.github/workflows/deploy.yaml"
     if : ${{ needs.define-environment.outputs.env_name }}
     with: