diff --git a/.github/workflows/build-nightly.yaml b/.github/workflows/build-nightly.yaml
index d2cca4b02..dc6c16b4c 100644
--- a/.github/workflows/build-nightly.yaml
+++ b/.github/workflows/build-nightly.yaml
@@ -9,6 +9,9 @@ on:
 permissions:
   contents: write
   packages: write
+  artifact-metadata: write
+  attestations: write
+  id-token: write
 
 jobs:
   build-syncthing: