diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b2587f6c8..dbf68ef35 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,6 +57,8 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     permissions:
       contents: write
+      id-token: write
+      attestations: write
     needs:
       - prepare
       - compile-and-test