diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 5cdcadfe2..f0a60977f 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -7,6 +7,9 @@ on:
 permissions:
   contents: read
   id-token: write # Required to authenticate with npm
+  # Required for the docs deployment job
+  actions: read
+  pages: write
 
 jobs:
   docs: