diff --git a/.github/workflows/release-deno.yml b/.github/workflows/release-deno.yml
index 5fd0037..f35bad9 100644
--- a/.github/workflows/release-deno.yml
+++ b/.github/workflows/release-deno.yml
@@ -13,6 +13,9 @@ jobs:
       matrix:
         node-version: [18.x]
 
+    permissions:
+      id-token: write # This is required for requesting the JWT
+      contents: read  # This is required for actions/checkout
     steps:
       - name: Check out
         uses: actions/checkout@v3