diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ea5b4991..64dbe271 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,6 +22,9 @@ permissions:
 jobs:
   build:
     uses: ./.github/workflows/build.yml
+    permissions:
+      id-token: write
+      attestations: write
     with:
       version: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || '' }}