diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a26814e..2b035b9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -50,7 +50,7 @@ jobs:
     name: Test attest-provenance action
     runs-on: ubuntu-latest
     permissions:
-      contents: write
+      attestations: write
       id-token: write
 
     steps: