diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index ca4f94bd5..2f2ba4d47 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -17,7 +17,8 @@ on:
   merge_group:
     types: [checks_requested]
 permissions:
-  contents: write
+  id-token: write
+  pages: write
 jobs:
   checks:
     if: github.event_name != 'push'