diff --git a/.github/workflows/slsa-generator-nodejs-custom.yaml b/.github/workflows/slsa-generator-nodejs-custom.yaml
index d6ca735..8473060 100644
--- a/.github/workflows/slsa-generator-nodejs-custom.yaml
+++ b/.github/workflows/slsa-generator-nodejs-custom.yaml
@@ -7,6 +7,7 @@ on:
 permissions:
   contents: read
   id-token: write
+  attestations: write
 
 jobs:
   build: