diff --git a/.github/workflows/deploy-prod.yaml b/.github/workflows/deploy-prod.yaml
index f9a1768..9ecb62a 100644
--- a/.github/workflows/deploy-prod.yaml
+++ b/.github/workflows/deploy-prod.yaml
@@ -9,5 +9,8 @@ on:
 jobs:
   deploy-prod:
     uses: ./.github/workflows/serverless-deploy.yaml
+    permissions:
+      id-token: write
+      contents: read
     with:
       ENVIRONMENT: prod
\ No newline at end of file