diff --git a/.github/workflows/ant.yml b/.github/workflows/ant.yml
index c4b2c16..ac2da12 100644
--- a/.github/workflows/ant.yml
+++ b/.github/workflows/ant.yml
@@ -49,5 +49,7 @@ jobs:
       perform-revision-tagging: ${{ github.repository == 'JOSM/OpenQA' && github.ref_type == 'branch' && github.ref_name == 'master' && github.event_name != 'schedule' && github.event_name != 'pull_request' && matrix.josm-revision == 'r19044' }}
     secrets: inherit
     permissions:
+      actions: write
+      attestations: write
       contents: write
       deployments: write