diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
index d7066ed3..c80ac27f 100644
--- a/.github/workflows/release-pr.yml
+++ b/.github/workflows/release-pr.yml
@@ -17,20 +17,23 @@ on:
         description: Version to release
         required: true
         type: string
+        default: patch
 
 jobs:
   make-release-pr:
+    permissions:
+      id-token: write # Enable OIDC
+      pull-requests: write
+      contents: write
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v3
+      - uses: chainguard-dev/actions/setup-gitsign@main
       - name: Install cargo-release
         uses: taiki-e/install-action@v1
         with:
           tool: cargo-release
 
-      - uses: actions/checkout@v3
-        with:
-          ref: main
-
       - uses: cargo-bins/release-pr@v1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}