diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 9deca2b2..1bb3f4d6 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -7,7 +7,9 @@ on:
     tags:
       - v[0-9]+.[0-9]+.[0-9]+*
 
-permissions: {}
+permissions:
+      id-token: write
+      contents: read
 
 jobs:
   docs: