diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8d215120..b69d24c0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,9 +1,5 @@
 name: Release automation
 
-permissions:
-  contents: write
-  pull-requests: write
-
 on:
   workflow_dispatch:
     inputs:
@@ -17,6 +13,10 @@ on:
 
 jobs:
   release:
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
     name: Create Release
     runs-on: ubuntu-latest
     steps: