diff --git a/.github/workflows/build_and_test.yaml b/.github/workflows/build_and_test.yaml
index 24b3e94f..fbf82ca3 100644
--- a/.github/workflows/build_and_test.yaml
+++ b/.github/workflows/build_and_test.yaml
@@ -3,6 +3,10 @@ run-name: 🧱 Build and Test ${{ github.ref_name }}
 env:
   GH_TOKEN: ${{ secrets.GH_TOKEN }}
 
+permissions:
+  id-token: write
+  contents: write
+
 on:
   workflow_dispatch:
   push: