diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml
index 3a474e5..21adb88 100644
--- a/.github/workflows/package.yaml
+++ b/.github/workflows/package.yaml
@@ -104,6 +104,8 @@ jobs:
     environment:
       name: pypi
       url: https://pypi.org/p/${{ env.PROJECT }}  # Replace <package-name> with your PyPI project name
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing
     strategy:
       fail-fast: false
       matrix: