diff --git a/.github/workflows/sodium_cd.yaml b/.github/workflows/sodium_cd.yaml
index b0c276e3..545618a4 100644
--- a/.github/workflows/sodium_cd.yaml
+++ b/.github/workflows/sodium_cd.yaml
@@ -9,6 +9,8 @@ jobs:
   publish:
     name: Publish
     uses: Skycoder42/dart_test_tools/.github/workflows/publish.yml@main
+    permissions:
+      id-token: write
     with:
       environment: pub-deploy
       tagPrefix: sodium-v
diff --git a/.github/workflows/sodium_libs_cd.yaml b/.github/workflows/sodium_libs_cd.yaml
index 86701d06..63deba17 100644
--- a/.github/workflows/sodium_libs_cd.yaml
+++ b/.github/workflows/sodium_libs_cd.yaml
@@ -9,6 +9,8 @@ jobs:
   publish:
     name: Publish
     uses: Skycoder42/dart_test_tools/.github/workflows/publish.yml@main
+    permissions:
+      id-token: write
     with:
       environment: pub-deploy
       tagPrefix: sodium_libs-v