diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 769f4197..3c9e08dc 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -67,7 +67,9 @@ jobs:
     environment: release
     needs: build
     permissions:
-      contents: write
+      contents: read
+      packages: write
+      attestations: write
       id-token: write
     steps:
       - uses: actions/checkout@v4