diff --git a/.github/workflows/publish-prerelease.yaml b/.github/workflows/publish-prerelease.yaml
index 28fd0bd..8fc8dfb 100644
--- a/.github/workflows/publish-prerelease.yaml
+++ b/.github/workflows/publish-prerelease.yaml
@@ -7,6 +7,8 @@ on:
 
 jobs:
   call-publish-pypi:
+    permissions:
+      id-token: write
     uses: ./.github/workflows/publish-pypi.yaml
     with:
       pypi_repository_url: https://test.pypi.org/legacy/
diff --git a/.github/workflows/publish-release.yaml b/.github/workflows/publish-release.yaml
index db565f9..04c6bc0 100644
--- a/.github/workflows/publish-release.yaml
+++ b/.github/workflows/publish-release.yaml
@@ -7,6 +7,8 @@ on:
 
 jobs:
   call-publish-pypi:
+    permissions:
+      id-token: write
     uses: ./.github/workflows/publish-pypi.yaml
     with:
       pypi_repository_url: https://upload.pypi.org/legacy/