diff --git a/.github/workflows/images_build_windows.yml b/.github/workflows/images_build_windows.yml
index 8075499b4..9207bc6d4 100644
--- a/.github/workflows/images_build_windows.yml
+++ b/.github/workflows/images_build_windows.yml
@@ -143,6 +143,9 @@ jobs:
   build_base:
     uses: ./.github/workflows/base_images_build_windows.yml
     if: ${{ github.event_name == 'release' }}
+    permissions:
+      contents: read
+      id-token: write
 
   build_components:
     name: Build ${{ matrix.component }} sources on ${{ matrix.os }}