diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 10450b68..fab25b0a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -87,6 +87,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: release
     permissions:
+      # See https://github.com/elastic/oblt-infra/tree/main/conf/resources/repos/elastic-serverless-forwarder/01-release.tf
       id-token: write
       contents: read
     env: