diff --git a/.github/workflows/release-pypi.yaml b/.github/workflows/release-pypi.yaml
index 9941b78..52ceb50 100644
--- a/.github/workflows/release-pypi.yaml
+++ b/.github/workflows/release-pypi.yaml
@@ -7,6 +7,10 @@ on:
       - "pyproject.toml"
 permissions:
   contents: write
+  pull-requests: write
+  issues: read
+  packages: none
+  id-token: write
 env:
   HATCH_INDEX_USER: __token__
   HATCH_INDEX_AUTH: ${{ secrets.pypi_password }}