From d5f5e30df764677ebeff54bb8bd7975e019e2baa Mon Sep 17 00:00:00 2001
From: Dmitri Gavrilov <gavrilov.dvs@gmail.com>
Date: Wed, 15 Oct 2025 22:28:53 -0400
Subject: [PATCH] CI: set it-token: write

---
 .github/workflows/publish-pypi.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index 271e969..10eaac5 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -40,5 +40,7 @@ jobs:
 
       - name: Publish to PyPI using trusted publishing
         uses: pypa/gh-action-pypi-publish@release/v1
+        permissions:
+            id-token: write
         with:
           attestations: false