diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7e16caa..6a688ff 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,6 +2,10 @@ name: Publish to GitHub Pages
 on:
   push:
     branches: [main, master]
+permissions:
+  contents: read
+  pages: write
+  id-token: write
 jobs:
   build:
     runs-on: ubuntu-latest