diff --git a/.github/workflows/helm-release.yml b/.github/workflows/helm-release.yml
index 15a07a8..818fc23 100644
--- a/.github/workflows/helm-release.yml
+++ b/.github/workflows/helm-release.yml
@@ -67,6 +67,7 @@ jobs:
     if: needs.setup.outputs.changed == 'true'
     permissions:
       contents: write
+      id-token: write
     steps:
     - id: get-secrets
       uses: grafana/shared-workflows/actions/get-vault-secrets@main