diff --git a/.github/workflows/rl-secure.yml b/.github/workflows/rl-secure.yml
index 2cfc6e0e9..3cb964c11 100644
--- a/.github/workflows/rl-secure.yml
+++ b/.github/workflows/rl-secure.yml
@@ -19,6 +19,7 @@ jobs:
 
     permissions:
       pull-requests: write
+      id-token: write # This is required for requesting the JWT
 
     steps:
       - uses: actions/checkout@v4