diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index db34c2b..9ed260a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,6 +13,9 @@ defaults:
 jobs:
   Build:
     runs-on: "ubuntu-latest"
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - name: "📥 Checkout"