diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index e08992c7..b50b14f0 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -1,7 +1,8 @@
 name: Plugins - CD
 run-name: Deploy ${{ inputs.branch }} to ${{ inputs.environment }} by @${{ github.actor }}
 permissions:
-  contents: read
+  attestations: write
+  contents: write
   id-token: write
 
 on: