diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 534c06f..30e1a11 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -13,6 +13,10 @@ on:
 
 jobs:
   deploy:
+    permissions:
+      contents: "read"
+      id-token: "write"
+      
     runs-on: ubuntu-latest
 
     steps: