diff --git a/.github/workflows/build-gpu-cuda.yml b/.github/workflows/build-gpu-cuda.yml
index 8f4d1a9..128e71f 100644
--- a/.github/workflows/build-gpu-cuda.yml
+++ b/.github/workflows/build-gpu-cuda.yml
@@ -22,5 +22,8 @@ on:
 jobs:
   call-build:
     uses: ./.github/workflows/build.yml
+    permissions:
+      id-token: write
+      contents: read
     with:
       prefix: gpu-cuda
diff --git a/.github/workflows/build-standard.yml b/.github/workflows/build-standard.yml
index 296afc5..240425b 100644
--- a/.github/workflows/build-standard.yml
+++ b/.github/workflows/build-standard.yml
@@ -22,5 +22,8 @@ on:
 jobs:
   call-build:
     uses: ./.github/workflows/build.yml
+    permissions:
+      id-token: write
+      contents: read
     with:
       prefix: standard