diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0461b71..9919567 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,6 +4,9 @@ on:
   push:
     branches:
       - main
+      
+permissions:
+  id-token: write
 
 jobs:
   release:
@@ -26,4 +29,4 @@ jobs:
       if: steps.release.outputs.released == 'true'
       uses: python-semantic-release/upload-to-gh-release@main
       with:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
+        github_token: ${{ secrets.GITHUB_TOKEN }}