diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 76dbf63a..fd47040e 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -51,6 +51,8 @@ jobs:
     # if: ${{ false }}
     needs: [build-wheels, make-source-dist]
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     steps:
     - uses: actions/download-artifact@v3