diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c538e5c..8d2c7be 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -5,7 +5,10 @@ on:
     branches:
       - master
       - docker
-
+permissions:
+  id-token: write # This is required for requesting the JWT (GCloud auth)
+  contents: read  # This is required for actions/checkout
+  packages: read
 jobs:
   deploy:
     name: Deploy using GCloud