diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 9040f780..42d3f468 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -8,6 +8,9 @@ on:
     tags:
       - "*" # all tags
 
+permissions:
+  id-token: write
+
 jobs:
   build-n-publish:
     name: Build and publish Python 🐍 distributions 📦 to PyPI and TestPyPI