diff --git a/.github/workflows/reusable_publish_packages.yaml b/.github/workflows/reusable_publish_packages.yaml
index 25ffff3b..559266c7 100644
--- a/.github/workflows/reusable_publish_packages.yaml
+++ b/.github/workflows/reusable_publish_packages.yaml
@@ -11,7 +11,11 @@ on:
         required: false
         default: ''
         type: string
-        
+       
+permissions:
+  id-token: write
+  contents: read
+
 env:
   AWS_S3_REGION: eu-west-1