diff --git a/.github/workflows/publish_internal.yaml b/.github/workflows/publish_internal.yaml
index 9984bc6f..28510590 100644
--- a/.github/workflows/publish_internal.yaml
+++ b/.github/workflows/publish_internal.yaml
@@ -20,3 +20,6 @@ jobs:
       use-flutter: false
       write-comments: false
       sdk: dev
+    permissions:
+      id-token: write
+      pull-requests: write