diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d8dcdef..bdb3165 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -12,7 +12,7 @@ on:
 permissions:
   contents: read
   pull-requests: write
-
+  id-token: write
 jobs:
   lint:
     runs-on: ubuntu-latest
@@ -65,8 +65,6 @@ jobs:
     name: Build and Publish to PyPI
     runs-on: ubuntu-latest
     needs: test
-    permissions:
-      id-token: write
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
     steps: