diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 4d6a4fc36..a510967e0 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -9,10 +9,12 @@ on:
 
 permissions:
   contents: read
-  id-token: write
 
 jobs:
   pip:
+    permissions:
+      contents: read
+      id-token: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4