diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index d0bb5a36..5da902a2 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -10,8 +10,6 @@ jobs:
   build_wheels:
     name: Wheels lambdapdk
     runs-on: ubuntu-latest
-    permissions:
-      id-token: write
 
     steps:
     - uses: actions/checkout@v4
@@ -22,6 +20,8 @@ jobs:
   publish:
     needs: [build_wheels]
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     if: github.event_name == 'release' && github.event.action == 'published'
 
     steps: