diff --git a/.github/workflows/build-and-push.yaml b/.github/workflows/build-and-push.yaml
index 76f5fab..548a3d5 100644
--- a/.github/workflows/build-and-push.yaml
+++ b/.github/workflows/build-and-push.yaml
@@ -45,6 +45,7 @@ jobs:
             contents: read
             packages: write
             id-token: write
+            attestations: write
         needs:
             - build-and-push-php
         uses: ./.github/workflows/docker-registry-cleanup.yaml