diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 87c9c11fc1..ee26473b92 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -478,6 +478,11 @@ jobs:
     with:
       apk_filename: com.x8bit.bitwarden.apk
       test_apk_filename: com.x8bit.bitwarden-test.apk
+    permissions:
+      actions: read
+      checks: write
+      contents: read
+      id-token: write
 
   publish_fdroid:
     name: Publish F-Droid artifacts