diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5046f4c..d5358c7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -98,4 +98,7 @@ jobs:
       with:
         name: Windows binary
         path: gg.exe
+permissions:
+  contents: read
+  id-token: write