diff --git a/.github/workflows/ci-cd-main.yml b/.github/workflows/ci-cd-main.yml
index f41a7c78..2819ea35 100644
--- a/.github/workflows/ci-cd-main.yml
+++ b/.github/workflows/ci-cd-main.yml
@@ -42,6 +42,7 @@ jobs:
     outputs:
       necessary_jobs: ${{ steps.check.outputs.necessary_jobs }}
     permissions:
+      id-token: write
       packages: read
     steps:
       - name: Workaround for detecting new workflows in branches
diff --git a/.github/workflows/ci-cd-main.yml.erb b/.github/workflows/ci-cd-main.yml.erb
index b1686911..5f6f2fa1 100644
--- a/.github/workflows/ci-cd-main.yml.erb
+++ b/.github/workflows/ci-cd-main.yml.erb
@@ -32,6 +32,7 @@ jobs:
     outputs:
       necessary_jobs: ${{ steps.check.outputs.necessary_jobs }}
     permissions:
+      id-token: write
       packages: read
     steps:
       - name: Workaround for detecting new workflows in branches