diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8df78ac7..51048671 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -5,6 +5,11 @@ on:
       - main
 jobs:
   publish:
+    permissions:
+      contents: 'write'
+      id-token: 'write'
+      issues: 'write'
+      pull-requests: 'write'
     runs-on: ubuntu-24.04
     steps:
       - name: Check out code