diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 2ed3d00b..5192ddf0 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -15,6 +15,12 @@ jobs:
     name: Release
     if: github.repository_owner == 'BitGo'
     runs-on: ubuntu-latest
+    environment: publish-apits
+    permissions:
+      id-token: write
+      contents: write
+      issues: write
+      pull-requests: write
 
     steps:
       - name: Checkout