diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bdc0e05..3680073 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,6 +36,7 @@ jobs:
     permissions:
       contents: read
       packages: write # push the skill OCI artifact to GHCR
+      id-token: write # sign the OCI artifact with GitHub OIDC
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3