diff --git a/.github/workflows/tag-beta.yml b/.github/workflows/tag-beta.yml
index 5a9c6af..019bec2 100644
--- a/.github/workflows/tag-beta.yml
+++ b/.github/workflows/tag-beta.yml
@@ -14,6 +14,11 @@ jobs:
   docs:
     name: "Docs"
 
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+
     uses: ./.github/workflows/part_docs.yml
 
   publish:
diff --git a/.github/workflows/tag-stable.yml b/.github/workflows/tag-stable.yml
index 086b6a9..9468c34 100644
--- a/.github/workflows/tag-stable.yml
+++ b/.github/workflows/tag-stable.yml
@@ -12,6 +12,11 @@ jobs:
   docs:
     name: "Docs"
 
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+
     uses: ./.github/workflows/part_docs.yml
 
   publish: