diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml
index d9eee6c..bc402c1 100644
--- a/.github/workflows/pythonpublish.yml
+++ b/.github/workflows/pythonpublish.yml
@@ -13,6 +13,11 @@ jobs:
   dist:
     runs-on: ubuntu-latest
 
+    environmen: release
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
+
     steps:
     - uses: actions/checkout@v4