diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1807455..c9214e9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -8,6 +8,10 @@ on:
 
 jobs:
   publish:
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
     if: github.repository_owner == 'bombshell-dev'
     uses: bombshell-dev/automation/.github/workflows/publish.yml@main
     secrets: inherit