diff --git a/.github/workflows/publish-v2.yml b/.github/workflows/publish-v2.yml
index 174ec281a..292c1c4cf 100644
--- a/.github/workflows/publish-v2.yml
+++ b/.github/workflows/publish-v2.yml
@@ -15,6 +15,9 @@ jobs:
     publish:
         runs-on: ubuntu-latest
         environment: ${{ inputs.environment }}
+        permissions:
+          id-token: write
+          contents: read
         steps:
             - uses: actions/checkout@v3