diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index dd7b3d9..4e67cae 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -26,6 +26,8 @@ jobs:
           pip install dist/*.whl
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+        permissions:
+          id-token: write
         with:
           password: ${{ secrets.pypi_token }}
           repository_url: https://upload.pypi.org/legacy/