diff --git a/.github/workflows/deploy_dev.yml b/.github/workflows/deploy_dev.yml
index 4345ea6..b0e4d29 100644
--- a/.github/workflows/deploy_dev.yml
+++ b/.github/workflows/deploy_dev.yml
@@ -9,14 +9,14 @@ on:
   workflow_dispatch:
     tags: [deploy-dev*]
 
+permissions:
+  id-token: write
+  
 env:
   TF_VERSION: 1.1.0
   TG_VERSION: 0.29.2
   TARGET_ENV: dev
 
-permissions:
-  id-token: write
-
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "deploy"
diff --git a/.github/workflows/deploy_dlv.yml b/.github/workflows/deploy_dlv.yml
index d09ec56..a2adba6 100644
--- a/.github/workflows/deploy_dlv.yml
+++ b/.github/workflows/deploy_dlv.yml
@@ -13,6 +13,9 @@ env:
   TG_VERSION: 0.29.2
   TARGET_ENV: dlv
 
+permissions:
+  id-token: write
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "deploy"
diff --git a/.github/workflows/deploy_int.yml b/.github/workflows/deploy_int.yml
index 9237db6..6c6c62d 100644
--- a/.github/workflows/deploy_int.yml
+++ b/.github/workflows/deploy_int.yml
@@ -26,6 +26,9 @@ env:
   TG_VERSION: 0.29.2
   TARGET_ENV: int
 
+permissions:
+  id-token: write
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "deploy"
diff --git a/.github/workflows/deploy_prd.yml b/.github/workflows/deploy_prd.yml
index 8e84b83..3fd4312 100644
--- a/.github/workflows/deploy_prd.yml
+++ b/.github/workflows/deploy_prd.yml
@@ -12,6 +12,9 @@ env:
   TG_VERSION: 0.29.2
   TARGET_ENV: prd
 
+permissions:
+  id-token: write
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "deploy"
diff --git a/.github/workflows/deploy_tst.yml b/.github/workflows/deploy_tst.yml
index 428dd02..9271aa8 100644
--- a/.github/workflows/deploy_tst.yml
+++ b/.github/workflows/deploy_tst.yml
@@ -12,6 +12,9 @@ env:
   TG_VERSION: 0.29.2
   TARGET_ENV: tst
 
+permissions:
+  id-token: write
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "deploy"