diff --git a/.github/workflows/build-ios-release.yml b/.github/workflows/build-ios-release.yml
index a8e6e8a44..dd17e5b58 100644
--- a/.github/workflows/build-ios-release.yml
+++ b/.github/workflows/build-ios-release.yml
@@ -75,6 +75,9 @@ jobs:
     if: ${{ !contains(github.ref_name , 'release-ios') }}
     needs:
       - test
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - name: ci/checkout-repo
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2