diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index f96c075..fef5e3a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -10,6 +10,7 @@ on: # rebuild any PRs and main branch changes
 
 permissions:
   contents: read
+  attestations: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name }}