diff --git a/.github/workflows/publish-ruby.yml b/.github/workflows/publish-ruby.yml
index 2be1eab85..6614113cd 100644
--- a/.github/workflows/publish-ruby.yml
+++ b/.github/workflows/publish-ruby.yml
@@ -12,9 +12,11 @@ on:
         options:
           - Release
           - Dry Run
-    permissions:
-      id-token: write
-      contents: write
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
 
 jobs:
   setup: