diff --git a/.github/workflows/qc_checks.yaml b/.github/workflows/qc_checks.yaml
index 041d020647..6c2c0207c6 100644
--- a/.github/workflows/qc_checks.yaml
+++ b/.github/workflows/qc_checks.yaml
@@ -286,6 +286,9 @@ jobs:
 
     needs: ["pre-commit", "paths-filter"]
     if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
+    permissions:
+      contents: read
+      id-token: write
 
     env:
       WRAPPER_NAME: inventree-python