diff --git a/.github/workflows/app-builder.yaml b/.github/workflows/app-builder.yaml
index 36fc96cf7..c65c22a0e 100644
--- a/.github/workflows/app-builder.yaml
+++ b/.github/workflows/app-builder.yaml
@@ -18,6 +18,7 @@ permissions:
   contents: read
   packages: write
   id-token: write
+  attestations: write
 
 jobs:
   plan: