diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a6a8b4e..b1e189c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,6 +2,10 @@ name: Publish
 on:
   release:
     types: [published]
+
+permissions:
+  id-token: write  # Required for OIDC
+
 jobs:
   publish:
     name: Publish npm package on release