diff --git a/.github/workflows/terratest.yml b/.github/workflows/terratest.yml
index a218c38..29b800a 100644
--- a/.github/workflows/terratest.yml
+++ b/.github/workflows/terratest.yml
@@ -20,6 +20,10 @@ on:
                 default: '1.9.0'
                 type: string
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
 
     terratest: