diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 35d6bfa..545e323 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -3,6 +3,9 @@ env:
   DEBUG: napi:*
   APP_NAME: package-template
   MACOSX_DEPLOYMENT_TARGET: '10.13'
+permissions:
+  contents: write
+  id-token: write
 'on':
   push:
     branches:
@@ -160,7 +163,7 @@ jobs:
           path: ${{ env.APP_NAME }}.*.node
           if-no-files-found: error
   build-freebsd:
-    runs-on: macos-12
+    runs-on: macos-13
     name: Build FreeBSD
     steps:
       - uses: actions/checkout@v4