diff --git a/.github/workflows/test-release-sync.yaml b/.github/workflows/test-release-sync.yaml
index a989c4947..b13519638 100644
--- a/.github/workflows/test-release-sync.yaml
+++ b/.github/workflows/test-release-sync.yaml
@@ -155,6 +155,7 @@ jobs:
     name: Release
     needs: ["checks", "build"]
     permissions:
+      id-token: write
       contents: write
       pull-requests: write
     if: "success() && github.event_name == 'push'"