diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index f9b4351..333feae 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -9,6 +9,9 @@ on:
 jobs:
     build:
         runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            id-token: write
         steps:
             - uses: actions/checkout@v4
             # Setup .npmrc file to publish to npm