diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 2ec45aab..efc71f64 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -14,3 +14,6 @@ jobs:
     uses: dart-lang/ecosystem/.github/workflows/publish.yaml@main
     with:
       write-comments: false
+    permissions:
+      id-token: write
+      pull-requests: write