diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index e8c1f1c..73f50b7 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -48,6 +48,9 @@ jobs:
   # For local development purposes
   build-artifacts-macos:
     runs-on: ${{ matrix.systems.runner }}
+    permissions:
+      id-token: "write"
+      contents: "read"
     strategy:
       matrix:
         systems: