diff --git a/.github/workflows/deploy-docs.yaml b/.github/workflows/deploy-docs.yaml
index f93c1147..bfb3e775 100644
--- a/.github/workflows/deploy-docs.yaml
+++ b/.github/workflows/deploy-docs.yaml
@@ -8,6 +8,11 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.sha }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  pages: write
+  id-token: write 
+
 jobs:
   build:
     if: github.repository == 'NVIDIA/tilus'