diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 69db5d2..370d74a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -13,6 +13,10 @@ on:
         - 'true'
         - 'false'
 
+permissions:
+  id-token: write
+  contents: read
+
 env:
   AWS_PUBLIC_ECR_REGION: us-east-1
   AWS_PRIVATE_ECR_REGION: us-west-2