diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 21e38415..1d97440e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -506,6 +506,8 @@ jobs:
   deploy-cloud:
     runs-on: ubuntu-latest
     if: ${{ needs.check_changes.outputs.deploy == 'true' && github.ref == 'refs/heads/main' }}
+    permissions:
+      id-token: write
     needs:
       [check_changes, build-app-image, build-control-plane-image]
     steps: