diff --git a/.github/workflows/linux-ci.yml b/.github/workflows/linux-ci.yml
index 74f8d90e2..8e08f8494 100644
--- a/.github/workflows/linux-ci.yml
+++ b/.github/workflows/linux-ci.yml
@@ -15,6 +15,9 @@ concurrency:
   # INFO: We are cancelling the concurrency group if the change is on PR. For workflow dispatch, this will not work.
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
+permissions:
+  id-token: write      # This is required for requesting the AWS JWT
+
 jobs:
   pre_job:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/pr-bloaty.yml b/.github/workflows/pr-bloaty.yml
index 98e32b8c7..b42063d52 100644
--- a/.github/workflows/pr-bloaty.yml
+++ b/.github/workflows/pr-bloaty.yml
@@ -14,6 +14,7 @@ env:
 
 permissions:
   pull-requests: write
+  id-token: write      # This is required for requesting the AWS JWT
 
 jobs:
   pr-bloaty: