diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d75d9fdd5..9e961e4b4 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -13,6 +13,7 @@ permissions:
 jobs:
   publish:
     permissions:
+      id-token: write
       contents: write  # for helm/chart-releaser-action to push chart release and create a release
       packages: write  # to push OCI chart package to GitHub Registry
     runs-on: ubuntu-latest