diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fb50eb21..be91e4fa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -38,6 +38,10 @@ permissions: {}
 
 jobs:
   deleteDevReleases:
+    permissions:
+      id-token: write  # for OIDC token generation
+      contents: write  # for git tag/release deletion
+      packages: write  # for artifact registry cleanup
     uses: Checkmarx/ast-eclipse-plugin/.github/workflows/delete-dev-releases.yml@a776dbbfa70cda798753bec14dd7c1f47d094595
     with:
       tag: ${{ inputs.rbranch }}