diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index 0207e21..5688cbd 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -137,6 +137,8 @@ jobs:
     environment: "Package deployment"
     needs: [pre-publish]
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v3
         with: