diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index a423f41..988abf6 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -2,24 +2,35 @@ name: Deploy to GitHub Pages
 
 on:
   push:
-    branches: [ "main" ]
+    branches: ["main"]
   pull_request:
-    branches: [ "main" ]
+    branches: ["main"]
+
+# PERMISSIONS FIX (Key Change)
+permissions:
+  contents: read    # Needed to checkout code
+  pages: write      # Needed to deploy to Pages
+  id-token: write   # Required for OIDC token generation
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
+        uses: actions/checkout@v4
 
       - name: Setup Pages
-        uses: actions/configure-pages@v3
+        uses: actions/configure-pages@v4
 
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v3
         with:
-          path: './'  # Deploys everything in the root
+          path: './'
 
-      - name: Deploy to GitHub Pages
-        if: github.ref == 'refs/heads/main'
-        uses: actions/deploy-pages@v2
\ No newline at end of file
+      - name: Deploy
+        id: deployment
+        uses: actions/deploy-pages@v4
\ No newline at end of file