diff --git a/.github/workflows/unittest_ci.yml b/.github/workflows/unittest_ci.yml
index 1f0b18dcd..89aa2768f 100644
--- a/.github/workflows/unittest_ci.yml
+++ b/.github/workflows/unittest_ci.yml
@@ -64,6 +64,9 @@ jobs:
             python-tag: "py312"
             cuda-tag: "cu124"
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       runner: ${{ matrix.os }}
       timeout: 30
diff --git a/.github/workflows/unittest_ci_cpu.yml b/.github/workflows/unittest_ci_cpu.yml
index 4c92e6027..a0b0ef9eb 100644
--- a/.github/workflows/unittest_ci_cpu.yml
+++ b/.github/workflows/unittest_ci_cpu.yml
@@ -36,6 +36,9 @@ jobs:
               python-version: '3.12'
               python-tag: "py312"
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       runner: ${{ matrix.os }}
       timeout: 15