diff --git a/.github/workflows/build-ios-beta.yml b/.github/workflows/build-ios-beta.yml
index c3153d52e..bc3910715 100644
--- a/.github/workflows/build-ios-beta.yml
+++ b/.github/workflows/build-ios-beta.yml
@@ -27,6 +27,9 @@ jobs:
     if: ${{ !contains(github.ref_name, 'beta-ios') }}
     needs:
       - test
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - name: ci/checkout-repo
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2