diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index a5e41c4a6..0966f0687 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -15,3 +15,6 @@ jobs:
     uses: dart-lang/ecosystem/.github/workflows/publish.yaml@main
     with:
       sdk: dev
+    permissions:
+      id-token: write
+      pull-requests: write