diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index d3cd4d5..01dea2d 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -11,6 +11,9 @@ env:
   CRT_CI_ROLE: ${{ secrets.CRT_CI_ROLE_ARN }}
   AWS_DEFAULT_REGION: us-east-1
 
+permissions:
+  id-token: write # This is required for requesting the JWT
+
 jobs:
   codecov-linux:
     runs-on: ubuntu-24.04