diff --git a/.github/workflows/default.yml b/.github/workflows/default.yml
index 988cbd5..8c503cd 100644
--- a/.github/workflows/default.yml
+++ b/.github/workflows/default.yml
@@ -61,6 +61,8 @@ jobs:
       working-directory: example
 
   release:
+    permissions:
+      contents: write
     needs:
       - build
       - checks
@@ -69,6 +71,8 @@ jobs:
     uses: ./.github/workflows/release.yml
 
   publish:
+    permissions:
+      id-token: write
     needs:
       - release
     name: Publish
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d4405de..0a8c2cb 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -8,4 +8,6 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     permissions:
       id-token: write
-    uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1
\ No newline at end of file
+    uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1
+    with:
+      environment: pub.dev