diff --git a/.github/workflows/generate-index.yml b/.github/workflows/generate-index.yml
index 2f79d87..5f269f1 100644
--- a/.github/workflows/generate-index.yml
+++ b/.github/workflows/generate-index.yml
@@ -21,6 +21,10 @@ on:
 jobs:
   generate-index:
     runs-on: ubuntu-latest
+    environment: production
+    permissions:
+      contents: write
+      id-token: write # This is required for requesting the JWT
     defaults:
       run:
         working-directory: generator