diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e9e6d6a..3907f3c 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -23,6 +23,9 @@ on:
           - 'pypi'
           - 'testpypi'
 
+permissions:
+  id-token: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -62,9 +65,6 @@ jobs:
         run: |
           poetry build
 
-        permissions:
-          id-token: write
-
       - name: Publish to TestPyPI or PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with: