diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f2195f41..06e87dc8 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -139,6 +139,9 @@ jobs:
 
   login-to-amazon-ecr:
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2