diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 3865ecae4f..3fb689df3e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -1,4 +1,9 @@
 name: Build doxygen and deploy to GitHub Pages
+permissions:
+    actions: read
+    contents: read
+    pages: write
+    id-token: write
 on:
     push:
         branches: