diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
index 353d242..0bfbb5e 100644
--- a/.github/workflows/pypi.yaml
+++ b/.github/workflows/pypi.yaml
@@ -7,6 +7,9 @@ on:
       - v*
   workflow_dispatch: # Uncomment line if you also want to trigger action manually
 
+permissions:
+  id-token: write
+
 jobs:
   build-release:
     runs-on: ubuntu-latest
diff --git a/.gitignore b/.gitignore
index 7792d96..8b71906 100644
--- a/.gitignore
+++ b/.gitignore
@@ -137,4 +137,7 @@ _version.py
 \#*
 
 # Ignore topostats/_version.py as per setuptools_scm
-AFMReader/_version.py
\ No newline at end of file
+AFMReader/_version.py
+
+# Ignore tmp/ directory
+tmp/
\ No newline at end of file