diff --git a/.github/workflows/next.yaml b/.github/workflows/next.yaml
index 7129d52..25db922 100644
--- a/.github/workflows/next.yaml
+++ b/.github/workflows/next.yaml
@@ -12,6 +12,7 @@ permissions:
   actions: write # Allow canceling in-progress runs
   contents: read # Read access to the repository
   packages: write # Write access to the container registry
+  id-token: write # For the attest action to push
 
 jobs:
   publish:
@@ -56,7 +57,7 @@ jobs:
           platforms: linux/amd64, linux/arm64
           cache-from: type=gha
           cache-to: type=gha,mode=max
-      - name: Attest
+      - name: Attestation Provenance
         uses: actions/attest-build-provenance@v2
         id: attest
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b7442cf..d36072a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -12,6 +12,7 @@ permissions:
   actions: write # Allow canceling in-progress runs
   contents: read # Read access to the repository
   packages: write # Write access to the container registry
+  id-token: write # For the attest action to push
 
 jobs:
   docker:
@@ -54,7 +55,7 @@ jobs:
           platforms: linux/amd64, linux/arm64
           cache-from: type=gha
           cache-to: type=gha,mode=max
-      - name: Attest
+      - name: Attestation Provenance
         uses: actions/attest-build-provenance@v2
         id: attest
         with: