diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9165fe8..7ba3899 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -12,9 +12,11 @@ jobs:
   release:
     name: Version
     runs-on: ubuntu-latest
+    environment: release
     permissions:
       contents: write
       pull-requests: write
+      id-token: write
     outputs:
       published: ${{ steps.changelogs.outputs.published }}
     steps: