diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1e4c9a8..3d96ba6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -49,6 +49,8 @@ jobs:
   publish:
     needs: [buildtest]
     name: Wheel-Publish
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     steps:
     - name: Download artifact