diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
index 836206d..f16977c 100644
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@@ -12,7 +12,9 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
-
+    permissions:
+      id-token: write # This is required for requesting the JWT
+      contents: read  # This is required for actions/checkout
     steps:
       - uses: actions/checkout@v2
       - name: Use Node.js