diff --git a/.github/workflows/maintenance.yml b/.github/workflows/maintenance.yml
index f3ba6cd..ff8cea0 100644
--- a/.github/workflows/maintenance.yml
+++ b/.github/workflows/maintenance.yml
@@ -6,6 +6,9 @@ on:
   # Sets a schedule for executing the jobs
   schedule:
     - cron: "10 20 * * 2,4"
+permissions:
+  id-token: write
+  contents: read
 
 jobs: