diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index e7ba296..8322b0e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -14,6 +14,11 @@ jobs:
     name: Build and publish Python 🐍 distributions to PyPI
     if: startsWith(github.event.ref, 'refs/tags')
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/widgetastic.core
+    permissions:
+      id-token: write  # This permission is mandatory for trusted publishing
     steps:
       - name: Checkout
         uses: actions/checkout@v4