diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3767b180e1..bbddbf3c01 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -78,6 +78,9 @@ jobs:
 
   login-quality:
     uses: ./.github/workflows/login-quality.yml
+    permissions:
+      actions: write
+      id-token: write
     with:
       force:  ${{ github.event_name == 'workflow_dispatch' }}