diff --git a/.github/workflows/cibuild.yml b/.github/workflows/cibuild.yml
index 0b5ee76..0a37f6f 100644
--- a/.github/workflows/cibuild.yml
+++ b/.github/workflows/cibuild.yml
@@ -15,6 +15,8 @@ defaults:
 
 permissions:  # added using https://github.com/step-security/secure-workflows
   contents: read
+  pages: write
+  id-token: write
 
 jobs:
   GitHub_Pages: