diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 73bf8a0..8160010 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,6 +26,7 @@ jobs:
       packages: write
       id-token: write # Sigstore OIDC for build provenance
       attestations: write # record the attestation on the repo
+      artifact-metadata: write # storage record for the pushed image
 
     steps:
       - uses: actions/checkout@v7.0.1