diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d5d039a..6dc397b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,6 +11,7 @@ permissions:
   pull-requests: write
   packages: write
   id-token: write
+  attestations: write
 
 env:
   GO111MODULE: "on"
@@ -33,9 +34,6 @@ jobs:
     name: Publish Provider
     needs:
       - release
-    permissions:
-      id-token: write
-      attestations: write
     strategy:
       max-parallel: 4
       matrix: