diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7a72092..1ec5f5e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,11 @@ on:
 env:
   CARGO_TERM_COLOR: always
 
+# To double check
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -65,9 +70,6 @@ jobs:
           role-to-assume: arn:aws:iam::381491931967:role/GitHubAction-EC2-RO
           role-session-name: deploy-role-session
           aws-region: us-east-2
-          # To double check
-          id-token: write # This is required for requesting the JWT
-          contents: read  # This is required for actions/checkout