diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 73f751b..0691cca 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -245,3 +245,8 @@ jobs:
             test_install.yml,
             publish.yml
           access_token: ${{ github.token }}
+
+# Workflow permissions:
+permissions:
+  contents: write
+  id-token: write