diff --git a/.github/workflows/python_package.yml b/.github/workflows/python_package.yml
index 0e3b654..0833f6f 100644
--- a/.github/workflows/python_package.yml
+++ b/.github/workflows/python_package.yml
@@ -5,6 +5,9 @@ on: [push,workflow_dispatch]
 jobs:
   build:
 
+    permissions:
+       # IMPORTANT: this permission is mandatory for trusted publishing
+       id-token: write
     runs-on: ${{ matrix.os }}
     continue-on-error: ${{ matrix.experimental }}
     strategy: