diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 49b9c1c94..dea9b1832 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,6 +17,8 @@ jobs:
 
   docker_build:
     runs-on: ubuntu-20.04
+    permissions:
+      id-token: write # needed for signing the images with GitHub OIDC Token
     strategy:
       matrix:
         component: