diff --git a/composite-actions/nodejs-lib/publish/action.yaml b/composite-actions/nodejs-lib/publish/action.yaml
index 2de7353d..76f7c7d6 100644
--- a/composite-actions/nodejs-lib/publish/action.yaml
+++ b/composite-actions/nodejs-lib/publish/action.yaml
@@ -11,6 +11,11 @@ inputs:
         description: 'GitHub Token to create releases'
         required: true
 
+permissions:
+    contents: write 
+    id-token: write
+    pull-requests: write
+
 runs:
   using: "composite"
   steps: