diff --git a/.github/workflows/agent-release.yml b/.github/workflows/agent-release.yml
index c27f651b96..ca7a894263 100644
--- a/.github/workflows/agent-release.yml
+++ b/.github/workflows/agent-release.yml
@@ -7,6 +7,7 @@ on:
   workflow_dispatch:
 
 permissions:
+  id-token: write
   contents: read
 
 jobs: