diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 564834a..fda2344 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -7,6 +7,7 @@ on:
 permissions:
   contents: read
   id-token: write
+  attestations: write
 
 jobs:
   build: