diff --git a/.github/workflows/_pypi_publish.yaml b/.github/workflows/_pypi_publish.yaml
index 29cb144..d82eb92 100644
--- a/.github/workflows/_pypi_publish.yaml
+++ b/.github/workflows/_pypi_publish.yaml
@@ -34,6 +34,7 @@ jobs:
           allowed-endpoints: >
             ghcr.io
             pypi.org
+            upload.pypi.org
             tuf-repo-cdn.sigstore.dev
             fulcio.sigstore.dev
             rekor.sigstore.dev