diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index 6565af3..aed6bac 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -88,6 +88,9 @@ jobs:
     permissions:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
+      contents: read
+      deployments: write
+      statuses: read
     strategy:
       matrix:
         python-version: [3.12]