diff --git a/.github/workflows/daggy-github-actions.yaml b/.github/workflows/daggy-github-actions.yaml
index 7b87a894..b9f428aa 100644
--- a/.github/workflows/daggy-github-actions.yaml
+++ b/.github/workflows/daggy-github-actions.yaml
@@ -137,6 +137,10 @@ jobs:
 
   win:
     runs-on: windows-latest
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -209,6 +213,10 @@ jobs:
 
   macos:
     runs-on: macos-latest
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
     steps:
       - uses: actions/checkout@v4
         with: