diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ff417dac4..23a0c2754 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -10,16 +10,18 @@ env:
   R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
   R2_API_ENDPOINT: ${{ secrets.R2_API_ENDPOINT }}
 
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub
+permissions:
+  contents: write
+  pages: write
+  id-token: write
+
 jobs:
   website:
     name: Website
     # https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md
     runs-on: ubuntu-latest
 
-    # Add "id-token" for Google Authentication
-    permissions:
-      id-token: write
-
     steps:
       - name: 🐧 Install dependencies
         run: |