diff --git a/.github/workflows/publish-webapp.yml b/.github/workflows/publish-webapp.yml
index 3672385c4d..246a8ea31d 100644
--- a/.github/workflows/publish-webapp.yml
+++ b/.github/workflows/publish-webapp.yml
@@ -3,6 +3,7 @@ name: "🐳 Publish Webapp"
 permissions:
   contents: read
   packages: write
+  id-token: write
 
 on:
   workflow_call: