diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a0d0dd201..9919c3f25 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -202,9 +202,6 @@ jobs:
     # "host" however must run to completion, no skipping allowed!
     if: ${{ always() && needs.host.result == 'success' }}
     runs-on: "depot-ubuntu-latest-4"
-    permissions:
-      "contents": "write"
-      "id-token": "write"
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
diff --git a/dist-workspace.toml b/dist-workspace.toml
index bebdab45c..efc734d67 100644
--- a/dist-workspace.toml
+++ b/dist-workspace.toml
@@ -47,7 +47,7 @@ dispatch-releases = true
 # Which phase dist should use to create the GitHub release
 github-release = "announce"
 # Whether to enable GitHub Attestations
-github-attestations = true
+github-attestations = false
 # When to generate GitHub Attestations
 github-attestations-phase = "announce"
 # Patterns to attest when creating attestations for release artifacts