diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1e133e6da8..9a36437ca7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -75,6 +75,7 @@ jobs:
     needs:
       - validate-tag
     permissions:
+      attestations: write
       contents: write
       id-token: write
     env:
diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
index 30388ce869..f985425da2 100644
--- a/.github/workflows/snapshot.yml
+++ b/.github/workflows/snapshot.yml
@@ -39,6 +39,7 @@ jobs:
     needs:
       - validate
     permissions:
+      attestations: write
       contents: write
       id-token: write
     env: