diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 6dd55e35d..bf87a90ae 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -9,6 +9,7 @@ on:
     branches: [ release-** ]
 
 permissions:
+  id-token: write
   contents: write
   packages: write
 
diff --git a/.github/workflows/helm-chart.yml b/.github/workflows/helm-chart.yml
index 76f1f0f27..ecddb39ba 100644
--- a/.github/workflows/helm-chart.yml
+++ b/.github/workflows/helm-chart.yml
@@ -6,6 +6,11 @@ on:
     types: [ completed ]
     branches: [ release-** ]
 
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read # This is required for actions/checkout
+  packages: write
+
 jobs:
   release:
     runs-on: ubuntu-latest