diff --git a/.github/workflows/build-deploy.yml b/.github/workflows/build-deploy.yml
index 94222d2e..0e599141 100644
--- a/.github/workflows/build-deploy.yml
+++ b/.github/workflows/build-deploy.yml
@@ -17,9 +17,7 @@ defaults:
   run:
     shell: bash
 
-permissions:
-  id-token: write   # This is required for requesting the JWT
-  contents: read    # This is required for actions/checkout
+permissions: write-all
 
 jobs:
   manual-build: