diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 31e9e3a31f..da8c8d455f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -7,4 +7,6 @@ on:
 
 jobs:
   publish:
+    permissions:
+      id-token: "write"
     uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1