diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 5d5042af..99a7993e 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -2,6 +2,11 @@ name: ci-test
 
 on: [pull_request]
 
+permissions:
+  id-token: write
+  contents: read
+  checks: write
+
 jobs:
   test-release:
     name: Test Release Build