diff --git a/.github/workflows/agent-release.yml b/.github/workflows/agent-release.yml
index ca7a89426..3d07b5d60 100644
--- a/.github/workflows/agent-release.yml
+++ b/.github/workflows/agent-release.yml
@@ -5,11 +5,6 @@ on:
     branches:
       - main
   workflow_dispatch:
-
-permissions:
-  id-token: write
-  contents: read
-
 jobs:
   check-package-version:
     name: Check package version and detect an update
@@ -37,6 +32,7 @@ jobs:
     if: needs.check-package-version.outputs.is-new-version == 'true'
     permissions:
       contents: read
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4