diff --git a/.github/workflows/update-main-source.yml b/.github/workflows/update-main-source.yml
index 94bd8ea8f3..c425d83c71 100644
--- a/.github/workflows/update-main-source.yml
+++ b/.github/workflows/update-main-source.yml
@@ -1,4 +1,4 @@
-name: Auto-update charts
+name: Auto-update charts on main-source branch
 
 on:
   workflow_dispatch: {}
@@ -7,6 +7,8 @@ on:
 
 jobs:
   update:
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
diff --git a/.github/workflows/update-main.yml b/.github/workflows/update-main.yml
index b21e80966b..e4d0196bad 100644
--- a/.github/workflows/update-main.yml
+++ b/.github/workflows/update-main.yml
@@ -1,13 +1,15 @@
 name: Update main branch from main-source
 
 on:
-  workflow_dispatch:
+  workflow_dispatch: {}
   push:
     branches:
       - main-source
 
 jobs:
   update:
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4