diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 532467c..81eabd6 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -5,6 +5,7 @@ permissions:
   contents: read
   security-events: write
   pull-requests: write
+  attestations: write
 
 jobs:
   docker-build: