diff --git a/.github/workflows/python-app.yml b/.github/workflows/python-app.yml
index 2711c46..9e85463 100644
--- a/.github/workflows/python-app.yml
+++ b/.github/workflows/python-app.yml
@@ -44,6 +44,8 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     # Set up operating system
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     environment:
       name: pypi
       url: https://pypi.org/p/ordinalgbt