diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 5d117bb0..81e75881 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -133,6 +133,9 @@ jobs:
     if: ${{ github.event_name == 'release' }} || ${{ github.event.inputs.publish == 'true' }}
     needs: [package]
 
+    permissions:
+      id-token: write
+
     runs-on: ubuntu-latest
     name: "🐍 Publish Bindings"