diff --git a/.github/workflows/python-publish.yaml b/.github/workflows/python-publish.yaml
index 5304b56..c6f457f 100644
--- a/.github/workflows/python-publish.yaml
+++ b/.github/workflows/python-publish.yaml
@@ -5,6 +5,7 @@ on:
   workflow_dispatch:
 permissions:
   contents: read
+  id-token: write
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -25,4 +26,4 @@ jobs:
           cache-python: true
           activate-environment: true
       - name: Upload to PyPI
-        run: uv pip install -e . && uv build && uv publish
\ No newline at end of file
+        run: uv pip install -e . && uv build && uv publish