diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml
index c020c6d..ce96fa3 100644
--- a/.github/workflows/pythonpublish.yml
+++ b/.github/workflows/pythonpublish.yml
@@ -32,7 +32,10 @@ jobs:
 
   publish:
     runs-on: ubuntu-latest
-    needs: build
+    needs:
+      - build
+    permissions:
+      id-token: write
     steps:
     - name: Download artifact
       uses: actions/download-artifact@v4