diff --git a/.github/workflows/release-image.yaml b/.github/workflows/release-image.yaml
index 97addc7..940ab49 100644
--- a/.github/workflows/release-image.yaml
+++ b/.github/workflows/release-image.yaml
@@ -31,6 +31,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
+      attestations: write
     env:
       IMAGE_REGISTRY: ${{ secrets.image-registry }}
       IMAGE_REGISTRY_USERNAME: ${{ secrets.image-registry-username }}