diff --git a/.github/workflows/deploy-fork-preview.yml b/.github/workflows/deploy-fork-preview.yml
index 10f90f05c6..9e18659672 100644
--- a/.github/workflows/deploy-fork-preview.yml
+++ b/.github/workflows/deploy-fork-preview.yml
@@ -6,6 +6,12 @@ on:
     types:
       - completed
 
+permissions:
+  id-token: write
+  actions: read
+  contents: read
+  deployments: write
+
 jobs:
   fork-preview:
     strategy: