diff --git a/.github/workflows/claude-code-review.yaml b/.github/workflows/claude-code-review.yaml
index 346b849..12b02ea 100644
--- a/.github/workflows/claude-code-review.yaml
+++ b/.github/workflows/claude-code-review.yaml
@@ -9,6 +9,7 @@ on:
 permissions:
   contents: read
   pull-requests: write
+  id-token: write
 
 jobs:
   claude-review:
diff --git a/scripts/rollout-review-workflow.sh b/scripts/rollout-review-workflow.sh
index e71c85a..19d0fb4 100755
--- a/scripts/rollout-review-workflow.sh
+++ b/scripts/rollout-review-workflow.sh
@@ -15,6 +15,7 @@ on:
 permissions:
   contents: read
   pull-requests: write
+  id-token: write
 
 jobs:
   review: