diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 4e65c2e..b4568d8 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -17,7 +17,12 @@ jobs:
 
   build-and-push-image:
     runs-on: ubuntu-latest
-    
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+
     steps:
       - uses: actions/checkout@v4
 
@@ -40,6 +45,7 @@ jobs:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Build and push
+        id: push
         uses: docker/build-push-action@v6
         with:
           context: .