diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 7d6442c8d..1615c46a5 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -15,3 +15,6 @@ jobs:
     uses: dart-lang/ecosystem/.github/workflows/publish.yaml@main
     with:
       write-comments: false
+    permissions:
+      id-token: write
+      pull-requests: write