diff --git a/.github/workflows/rake.yml b/.github/workflows/rake.yml
index 2f6c22e..7a468f5 100644
--- a/.github/workflows/rake.yml
+++ b/.github/workflows/rake.yml
@@ -2,6 +2,7 @@ name: rake
 
 permissions:
   contents: read
+  id-token: write
 
 on:
   push:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7bfcb47..b394817 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,7 @@ name: release
 permissions:
   contents: write
   packages: write
+  id-token: write
 
 on:
   workflow_dispatch: