diff --git a/.github/workflows/deploy-on-merge.yml b/.github/workflows/deploy-on-merge.yml
index b4993b4..15db35f 100644
--- a/.github/workflows/deploy-on-merge.yml
+++ b/.github/workflows/deploy-on-merge.yml
@@ -28,6 +28,8 @@ jobs:
       matrix:
         host: ${{ fromJson(needs.discover.outputs.hosts) }}
       fail-fast: false
+    permissions:
+      id-token: write
     uses: ./.github/workflows/_deploy-core.yml
     with:
       host: ${{ matrix.host }}
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index eb41ea1..e0a5242 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -44,6 +44,8 @@ jobs:
       matrix:
         host: ${{ fromJson(needs.prepare.outputs.hosts) }}
       fail-fast: false
+    permissions:
+      id-token: write
     uses: ./.github/workflows/_deploy-core.yml
     with:
       host: ${{ matrix.host }}